Roundcube Security Policy Bypass Vulnerability

72% confidence

Description

A vulnerability in Roundcube allows an attacker to bypass the security policy.

Vendor	Product	Versions
roundcube	roundcube webmail	< 1.5.15, 1.6.0 - < 1.6.15, 1.7.0 - < 1.7-rc6

Tier B

CERT-FR17h ago

→ No new info (linked only)

CISA KEV❌ No

Actively exploited❌ No

Patch available1.5.15, 1.6.15, 1.7-rc6

Published3/30/2026

Last enriched2h ago

0 upvotes0 downvotes