CVE-2026-48842 - Vulnerability Details

Related Threat Clusters

• Critical SQL Injection and XSS Vulnerabilities in RoundcubeMail Affect Fedora Users

  Recent updates to RoundcubeMail for Fedora 43 and 44 revealed critical vulnerabilities, including SQL injection and cross-site scripting (XSS) issues. CVE-2026-48842 details a pre-auth SQL injection in the…

  2 articles · Updated June 4, 2026
• Roundcube Webmail Vulnerabilities Expose Systems to Malware Attacks

  Roundcube Webmail has been found vulnerable due to eight security flaws, four of which are rated high severity (CVE-2026-48842, CVE-2026-48843, CVE-2026-48844, CVE-2026-48848). Attackers can exploit these…

  5 articles · Updated May 27, 2026

Recent Intelligence Reports

• Fedora 43 Roundcube Webmail Important XSS SQL Issues 2026 — Linuxsecurity · June 4, 2026
• Fedora 44 RoundcubeMail Critical SQL Injection XSS Issues 2026 — Linuxsecurity · June 3, 2026
• Roundcube webmail instances attackable with malware — Heise.De · May 27, 2026

Related Entities