Skip to content
THREATWIRE

CVE Tracker · Vendor

Roundcube CVEs

11 CVEs in the tracker, 11 in the CISA KEV catalogue.

All vendors · RSS feed for Roundcube · Tracker data last updated 18 Oct 2026.

Showing 11 of 11

  1. CVE-2025-49113CVSS 8.8 highEPSS 99.0%KEV2025-06-02

    Webmail. RoundCube Webmail Deserialization of Untrusted Data Vulnerability

  2. CVE-2025-68461No CVSSEPSS 26.8%KEV

    Webmail. RoundCube Webmail Cross-site Scripting Vulnerability

  3. CVE-2024-42009No CVSSEPSS 82.9%KEV

    Webmail. RoundCube Webmail Cross-Site Scripting Vulnerability

  4. CVE-2024-37383No CVSSEPSS 73.3%KEV

    Webmail. RoundCube Webmail Cross-Site Scripting (XSS) Vulnerability

  5. CVE-2023-5631No CVSSEPSS 75.9%KEV

    Webmail. Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability

  6. CVE-2023-43770No CVSSEPSS 63.7%KEV

    Webmail. Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability

  7. CVE-2021-44026No CVSSEPSS 69.9%KEV

    Roundcube Webmail. Roundcube Webmail SQL Injection Vulnerability

  8. CVE-2020-35730No CVSSEPSS 32.9%KEV

    Roundcube Webmail. Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability

  9. CVE-2020-13965No CVSSEPSS 76.6%KEV

    Webmail. Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability

  10. CVE-2020-12641No CVSSEPSS 84.5%KEV

    Roundcube Webmail. Roundcube Webmail Remote Code Execution Vulnerability

  11. CVE-2017-16651No CVSSEPSS 45.7%KEV

    Roundcube Webmail. Roundcube Webmail File Disclosure Vulnerability