Roundcube Vulnerabilities Allow Attackers to Execute Malicious Scripts

Cybersecuritynews •Abinaya • December 19, 2025

Roundcube Webmail has released critical security updates addressing two significant vulnerabilities affecting versions 1.6 and 1.5 LTS. The flaws could enable attackers to execute malicious scripts and gain unauthorized access to sensitive information through multiple attack vectors. The first vulnerability is a Cross-Site Scripting (XSS) flaw in Roundcube’s SVG handling mechanism. Attackers can exploit the […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Roundcube Vulnerabilities Enable Malicious Script Execution Roundcube Webmail has issued critical security updates for vulnerabilities in versions 1.6 and 1.5 LTS. These flaws, including a Cross-Site Scripting (XSS) issue in SVG handling, could allow attackers to execute malicious scripts and gain unauthorized access to sensitive information. Users are advised to update their systems promptly to mitigate risks. 3 sources 35

Extracted Entities

Roundcube Vulnerabilities Allow Attackers to Execute Malicious Scripts

The full story

Extracted Entities

Attack Types (1)

Platforms (1)

Vulnerabilities (1)