vciy

CVEs we hold for Roundcube

Records whose assigning authority named Roundcube as the affected vendor. Newest identifiers first, capped at 200.

CVE-2026-75010no title heldRoundcube Webmail
CVE-2026-75007no title heldRoundcube Webmail
CVE-2026-75006no title heldRoundcube Webmail
CVE-2026-75004no title heldRoundcube Webmail
CVE-2026-75003no title heldRoundcube Webmail
CVE-2026-75002no title heldRoundcube Webmail
CVE-2026-75000no title heldRoundcube Webmail
CVE-2026-74999no title heldRoundcube Webmail
CVE-2026-74998no title heldRoundcube Webmail
CVE-2026-74997no title heldRoundcube Webmail
CVE-2026-62644no title heldRoundcube Webmail
CVE-2026-62643no title heldRoundcube Webmail
CVE-2026-62642no title heldRoundcube Webmail
CVE-2026-62641no title heldRoundcube Webmail
CVE-2026-54433no title heldRoundcube Webmail
CVE-2026-54432no title heldRoundcube Webmail
CVE-2026-48849no title heldRoundcube Webmail
CVE-2026-48848no title heldRoundcube Webmail
CVE-2026-48847no title heldRoundcube Webmail
CVE-2026-48846no title heldRoundcube Webmail
CVE-2026-48845no title heldRoundcube Webmail
CVE-2026-48844no title heldRoundcube Webmail
CVE-2026-48843no title heldRoundcube Webmail
CVE-2026-48842no title heldRoundcube Webmail
CVE-2026-35545no title heldRoundcube Webmail
CVE-2026-35544no title heldRoundcube Webmail
CVE-2026-35543no title heldRoundcube Webmail
CVE-2026-35542no title heldRoundcube Webmail
CVE-2026-35541no title heldRoundcube Webmail
CVE-2026-35540no title heldRoundcube Webmail
CVE-2026-35539no title heldRoundcube Webmail
CVE-2026-35538no title heldRoundcube Webmail
CVE-2026-35537no title heldRoundcube Webmail
CVE-2026-26079no title heldRoundcube Webmail
CVE-2026-25916no title heldRoundcube Webmail
CVE-2025-68461no title heldRoundcube Webmail
CVE-2025-68460no title heldRoundcube Webmail
CVE-2025-49113no title heldRoundcube Webmail
CVE-2023-5631Stored XSS vulnerability in RoundcubeRoundcube Roundcubemail

39 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.

Everything on this page is free. Public data. Withholding it protects nothing.