#Roundcube
LightNews LightNews
heisec.bsky.social
Angreifer nutzen derzeit eine Sicherheitslücke in Roundcube Webmail aus. Dafür müssen aber die Voraussetzungen stimmen. #Security
Jetzt updaten! Attacken auf Roundcube-Webmail-Instanzen beobachtet
Angreifer nutzen derzeit eine Sicherheitslücke in Roundcube Webmail aus. Dafür müssen aber die Voraussetzungen stimmen.
www.heise.de
September 25, 2026 at 7:35 AM
hendryadrian.bsky.social
Roundcube Webmail is affected by CVE-2026-48842, a high-severity unauthenticated SQL injection in virtuser_query. Exploitation can expose messages, address books, and user identities. #Roundcube #SQLInjection #CVE202648842
Roundcube Webmail Vulnerability In Attackers’ Crosshairs
Threat actors are exploiting a high-severity Roundcube flaw, tracked as CVE-2026-48842, which enables unauthenticated SQL injection through the virtuser_query plugin. Successful attacks can expose messages, address books, user identities, and other sensitive database content, prompting Roundcube to release fixes in versions 1.6.16 and 1.7.1. #Roundcube #CVE-2026-48842 #virtuser_query...
www.hendryadrian.com
September 25, 2026 at 9:00 AM
doop.toys
the roundcube is the most important shape ever invented
February 15, 2026 at 9:52 PM
bleepingcomputer.com
A high-severity Roundcube Webmail vulnerability patched in May is now being actively exploited in attacks, according to the Canadian Centre for Cyber Security.
Hackers now exploit critical Roundcube flaw in code injection attacks
A high-severity Roundcube Webmail vulnerability patched in May is now being actively exploited in attacks, according to the Canadian Centre for Cyber Security.
www.bleepingcomputer.com
September 24, 2026 at 1:28 PM
bleepingcomputer.com.web.brid.gy
Hackers now exploit critical Roundcube flaw in code injection attacks
A high-severity Roundcube Webmail vulnerability patched in May is now being actively exploited in attacks, according to the Canadian Centre for Cyber Security. [...]
www.bleepingcomputer.com
September 24, 2026 at 1:47 PM
hendryadrian.bsky.social
Critical flaws are under active attack across Roundcube, TeamCity, Check Point VPN and WordPress, while SolarWinds and Adobe issue urgent fixes for RCE and other severe bugs. #Roundcube #TeamCity #WordPress
Page Not Found - Cybersecurity News Everyday
www.hendryadrian.com
September 25, 2026 at 12:45 PM
campuscodi.risky.biz
-New malware: Psychedelic Stealer, BotHelper RAT, Carbonato botnet, PavokwiLoader, Sauron, Corp MDM Android spyware, RemControl and RedWing Android banking trojans
-New Roundcube bug exploited in the wild
-TrustSink technique
-TDengine vulnerability impacts IoT and ICS devices
September 25, 2026 at 8:08 AM
mae.wtf
roundcube mail ui with "Mark" pointing to an image of Mark S. from Severance
April 13, 2025 at 3:17 PM
bearstech.com
Roundcube, l'un des clients e-mail Open Source les plus populaires, rejoint Nextcloud.
nextcloud.com/fr/blo...
Roundcube, pionnier de l'email open source, rejoint la famille Nextcloud - Nextcloud %.
En devenant le nouvel administrateur de Roundcube, Nextcloud prend la direction de la croissance et de l'amélioration du projet.
nextcloud.com
December 1, 2023 at 9:00 AM
marsrakete.de
#roundcube #linux
Wer Roundcube Mail selbst hostet: Bitte nicht ungeprüft von 1.6.x auf 1.7.x migrieren. Das kann schief gehen, weil die Version 1.7 neue Strukturen im Webserver und PHP ab Version 8.5 erfordert. Und zurück migrieren geht schlecht, weil das Datenbankschema beim Upgrade verändert wird
May 28, 2026 at 6:02 AM
hapsis.bsky.social
Roundcube Webmail Vulnerability in Attackers’ Crosshairs

www.securityweek.com/roundcube-we...

#Kyberturvallisuus #ThreatIntel #Haavoittuvuus
Roundcube Webmail Vulnerability in Attackers’ Crosshairs
Hackers are exploiting CVE-2026-48842, an unauthenticated SQL injection vulnerability in Roundcube Webmail.
www.securityweek.com
September 25, 2026 at 8:00 AM
securityonline.bsky.social
Learn how hackers are exploiting the CVE-2026-48842 Roundcube SQL injection vulnerability. Understand the risk and how to patch your webmail server immediately.

#Roundcube #CyberSecurity #SQLInjection #DataBreach #TechNews
Active Exploitation Targets Roundcube Webmail Servers
A critical vulnerability can easily outlive its official patch if system administrators fail to update their servers expeditiously. Precisely this perilous scenario is currently unfolding surrounding the widely deployed Roundcube Webmail platform. Malicious actors are now actively weaponizing a severe SQL injection vulnerability, granting them the terrifying ability to assault the email infrastructure prior to any user authentication. On September 21, the Canadian Centre for Cyber Security drastically escalated its previous May advisory concerning Roundcube.
meterpreter.org
September 25, 2026 at 9:57 AM
arimelody.space
fascinating new scam going around for roundcube webmail admins; beware!! 🧵
a slightly broken-looking email claiming to be a system notification from cPanel/RoundCube, informing you of "several undelivered messages", and offering a suspicious button to "read undelivered mail".
October 22, 2024 at 4:25 AM
radwebhosting.com
🚀 How to Install #Roundcube on Rocky Linux #VPS (5 Minute Quick-Start Guide)

This article explains how to install Roundcube on Rocky Linux VPS.
What is Roundcube?
Roundcube is a free, ...
Continued 👉 #mariadb #certbot #selfhosted #selfhosting #letsencrypt #phpfpm #apache #rockylinux
🚀 How to Install Roundcube on Rocky Linux VPS (5 Minute Quick-Start Guide)
blog.radwebhosting.com
September 18, 2026 at 8:30 AM
redoracle.com
Hackers now exploit critical Roundcube flaw in code injection attacks https://redoracle.com/News/hackers-now-exploit-critical-roundcube-flaw-in-code-injection-attacks.html #roundcube #injection #webmail
September 25, 2026 at 4:41 AM
bloggersminds.com
Hackers Exploit Critical Roundcube Code Injection Flaw

What is the Roundcube flaw? Roundcube is an open source webmail client that many hosting providers and organisations embed to give users browser based e

https://bloggersminds.com/post/hackers-exploit-critical-roundcube-code-injection-flaw-6545
Hackers Exploit Critical Roundcube Code Injection Flaw
What is the Roundcube flaw? Roundcube is an open source webmail client that many hosting providers and organisations embed to give users browser based email access.
bloggersminds.com
September 24, 2026 at 1:32 PM
invoxiplaygames.uk
I'll gladly hop off roundcube that shit some mid
February 21, 2025 at 5:36 AM
heiseonline.flipboard.com.ap.brid.gy
Jetzt updaten! Attacken auf Roundcube-Webmail-Instanzen beobachtet
https://www.heise.de/news/Jetzt-updaten-Attacken-auf-Roundcube-Webmail-Instanzen-beobachtet-11465379.html?utm_source=flipboard&utm_medium=activitypub

Gepostet in Heise Security @heise-security-heiseonline
Jetzt updaten! Attacken auf Roundcube-Webmail-Instanzen beobachtet
Angreifer nutzen derzeit eine Sicherheitslücke in Roundcube Webmail aus. Dafür müssen aber die Voraussetzungen stimmen.
www.heise.de
September 25, 2026 at 7:52 AM
postac001.bsky.social
Roundcube WebmailのSQLインジェクション脆弱性（CVE-2026-48842）により、認証なしで攻撃者が悪用可能。
Roundcube Webmail Vulnerability in Attackers’ Crosshairs
Hackers are exploiting CVE-2026-48842, an unauthenticated SQL injection vulnerability in Roundcube Webmail.
www.securityweek.com
September 25, 2026 at 11:49 AM
lukelandvo.bsky.social
Simon Says.....ROUNDCUBE! #blender3d #underdog
January 1, 2025 at 6:33 PM
cybermaster77.bsky.social
Roundcube Pre-Auth SQL Injection Flaw Actively Exploited in the Wild

https://thehackernews.com/2026/09/roundcube-pre-auth-sql-injection-flaw.html

#CyberSecurity #InfoSec
September 25, 2026 at 9:00 PM
thedailytechfeed.com
Roundcube SQL injection flaw (CVE-2026-48842) is being actively exploited—patch to 1.6.16 or 1.7.1 now. #SecurityNews #Cybersecurity #Roundcube #SQLInjection #EmailSecurity https://thedailytechfeed.com/urgent-fix-issued-as-roundcube-sql-injection-vulnerability-now-actively-exploited/
September 24, 2026 at 8:32 AM
kitafox.bsky.social
Exploited Roundcube Webmail Vulnerability CVE-2026-48842（Roundcube Webmailの認証前SQLインジェクション脆弱性、実攻撃での悪用を確認） #SecurityOnline （Sep 24）

securityonline.info/exploited-ro...
https://securityonline.info/exploited-roundcube-webmail-vulnerability-cve-2026-48842/
securityonline.info
September 25, 2026 at 1:49 AM
thenewoil.org
Hackers now exploit critical #roundcube flaw in code injection attacks

https://www.bleepingcomputer.com/news/security/critical-roundcube-flaw-now-actively-exploited-in-code-injection-attacks/

#cybersecurity
Hackers now exploit critical Roundcube flaw in code injection attacks
A high-severity Roundcube Webmail vulnerability patched in May is now being actively exploited in attacks, according to the Canadian Centre for Cyber Security. [...]
www.bleepingcomputer.com
September 25, 2026 at 3:00 PM
campuscodi.risky.biz
Hunt researchers found APT28's Roundcube exploit kit on an exposed server

hunt.io/blog/operati...
Operation Roundish: Uncovering an APT28 Roundcube Exploitation Toolkit Targeting Ukraine
Hunt.io investigation uncovered Operation Roundish, an APT28 toolkit used to exploit Roundcube webmail and target Ukrainian government systems. Learn more.
hunt.io
March 12, 2026 at 10:17 AM