#roundcube


Roundcube Pre-Auth SQL Injection Flaw Actively Exploited in the Wild

Sep 25, 2026 // 13:27

The Canadian Centre for Cyber Security has warned that a now-patched Roundcube Webmail vulnerability is being actively exploited in the wild. The vulnerability in question […]

Hackers now exploit critical Roundcube flaw in code injection attacks

Sep 24, 2026 // 23:37

A high-severity Roundcube Webmail vulnerability patched in May is now being actively exploited in attacks, according to the Canadian Centre for Cyber Security. Roundcube Webmail […]

Hackers exploit Roundcube flaw to spy on academic researchers

Jul 8, 2026 // 23:37

A China-linked threat cluster has been exploiting vulnerable Roundcube servers at U.S. and Canadian universities to steal credentials and deploy backdoor malware. The campaign has […]

Suspected China-Aligned Hackers Exploit Roundcube Flaws Against Universities

Jul 7, 2026 // 12:39

A suspected China-aligned threat activity cluster has been observed exploiting Roundcube webmail software belonging to physics and engineering departments of U.S. and Canadian universities as […]

Suspected China-Aligned Hackers Exploit Roundcube Flaws Against Universities

Jul 7, 2026 // 12:19

A suspected China-aligned threat activity cluster has been observed exploiting Roundcube webmail software belonging to physics and engineering departments of U.S. and Canadian universities as […]

CISA Orders Agencies to Patch Two Critical Roundcube Vulnerabilities

Feb 22, 2026 // 14:31

On February 11, 2026, CISA added two critical vulnerabilities affecting the Roundcube Webmail platform to its Known Exploited Vulnerabilities (KEV) Catalog. These flaws are being leveraged by threat actors to […]