Skip to content

CVE-2026-48845

CVE

Threat entity extracted from intelligence sources

Frequency
2
occurrences
First Seen
June 3, 2026
Last Seen
June 4, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical SQL Injection and XSS Vulnerabilities in RoundcubeMail Affect Fedora Users74.0

Recent updates to RoundcubeMail for Fedora 43 and 44 revealed critical vulnerabilities, including SQL injection and cross-site scripting (XSS) issues. CVE-2026-48842 details a pre-auth SQL injection in the virtuser_query plugin, while CVE-2026-48843 highlights insufficient CSS sanitization leading t...

Public Exploits

Checking GitHub for proof-of-concept code…

CVE Details

Related Entities

Sql InjectionCode InjectionInformation DisclosurePrivilege EscalationServer-Side Request ForgeryFedoraCVE-2026-48842CVE-2026-48843CVE-2026-48844CVE-2026-48848Cwe-79 - Cross-site Scripting (xss)Cwe-89 - SQL Injection