CVE-2026-48845

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

June 3, 2026

Last Seen

June 4, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical SQL Injection and XSS Vulnerabilities in RoundcubeMail Affect Fedora Users74.0

Recent updates to RoundcubeMail for Fedora 43 and 44 revealed critical vulnerabilities, including SQL injection and cross-site scripting (XSS) issues. CVE-2026-48842 details a pre-auth SQL injection in the virtuser_query plugin, while CVE-2026-48843 highlights insufficient CSS sanitization leading t...

Public Exploits

Checking GitHub for proof-of-concept code…

Related Clusters (1)

Critical SQL Injection and XSS Vulnerabilities in RoundcubeMail Affect Fedora Users

Jun 4·2 sources

Related Entities

Sql Injection Code Injection Cross-Site Scripting (xss)Information Disclosure Privilege Escalation Server-Side Request Forgery Fedora CVE-2026-48842 CVE-2026-48843 CVE-2026-48844 CVE-2026-48848 CWE-269 - Improper Privilege Management

CVE-2026-48845

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Public Exploits

CVE Details

Related Clusters (1)

Critical SQL Injection and XSS Vulnerabilities in RoundcubeMail Affect Fedora Users

Related Articles (2)

Fedora 43 Roundcube Webmail Important XSS SQL Issues 2026

Fedora 44 RoundcubeMail Critical SQL Injection XSS Issues 2026

Related Entities