The Roundcube Webmail suite
100%
Total Score
100
100
100
| Title | Versions | Severity |
|---|---|---|
CVE-2026-35539 roundcube/roundcubemail is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in versions 1.7-beta - 1.7-rc5. | 1.7-beta - 1.7-rc5 | Medium |
CVE-2026-35540 roundcube/roundcubemail is vulnerable to Incorrect Resource Transfer Between Spheres in versions 1.7-beta - 1.7-rc5. | 1.7-beta - 1.7-rc5 | Medium |
CVE-2026-35538 roundcube/roundcubemail is vulnerable to Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') in versions 1.7-beta - 1.7-rc5. | 1.7-beta - 1.7-rc5 | Low |
CVE-2026-35537 roundcube/roundcubemail is vulnerable to Deserialization of Untrusted Data in versions 1.7-beta - 1.7-rc5. | 1.7-beta - 1.7-rc5 | Low |
CVE-2026-35541 roundcube/roundcubemail is vulnerable to Access of Resource Using Incompatible Type ('Type Confusion') in versions 1.7-beta - 1.7-rc5. | 1.7-beta - 1.7-rc5 | Medium |
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
pear/net_smtp Version ~1.12.0 | — | — |
mlocati/ip-lib Version ^1.22.0 | — | — |
pear/auth_sasl Version ~1.2.0 | — | — |
pear/crypt_gpg Version ~1.6.3 | — | — |
pear/mail_mime Version ~1.10.11 | — | — |
Secure your code, cloud, and runtime environments in one central system. Find and fix vulnerabilities automatically.
No credit card required | Scan results in 32secs.
SOC 2Compliant
ISO 27001Compliant