SecurityBleepingComputerabout 1 hour ago
Roundcube Webmail Flaw Actively Exploited
3 min read
Attackers are exploiting CVE-2026-48842, a pre-authenticated SQL injection in Roundcube's virtuser_query plugin patched in May. The Canadian Centre for Cyber Security warned Monday that the flaw is being exploited in the wild. Over 523,000 Roundcube instances are exposed online. Admins should upgrade to versions 1.6.16 or 1.7.1, or disable the plugin.
Level
Hype check
Tap to vote and see what everyone thinks.
