Aleksander Machniak

92 exploits Active since Aug 2012
CVE-2026-62642 WRITEUP MEDIUM WRITEUP
Roundcube Webmail - Loop with Unreachable Exit Condition ('Infinite Loop')
In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, an infinite loop was discovered in the TNEF decoder, which may lead to denial of service upon opening an email with a TNEF attachment.
CVSS 4.3
CVE-2026-62644 WRITEUP MEDIUM WRITEUP
Roundcube Webmail - Authentication Bypass by Spoofing
In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, the password plugin of the Roundcube Webmail was subject to username spoofing via session data, which could lead to account takeover.
CVSS 6.4
CVE-2026-62642 WRITEUP MEDIUM WRITEUP
Roundcube Webmail - Loop with Unreachable Exit Condition ('Infinite Loop')
In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, an infinite loop was discovered in the TNEF decoder, which may lead to denial of service upon opening an email with a TNEF attachment.
CVSS 4.3
CVE-2026-62644 WRITEUP MEDIUM WRITEUP
Roundcube Webmail - Authentication Bypass by Spoofing
In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, the password plugin of the Roundcube Webmail was subject to username spoofing via session data, which could lead to account takeover.
CVSS 6.4
CVE-2026-62641 WRITEUP MEDIUM WRITEUP
Roundcube Webmail - Allocation of Resources Without Limits or Throttling
In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, the TNEF decoder was subject to denial of service via a crafted compressed-RTF size.
CVSS 4.3
CVE-2026-62642 WRITEUP MEDIUM WRITEUP
Roundcube Webmail - Loop with Unreachable Exit Condition ('Infinite Loop')
In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, an infinite loop was discovered in the TNEF decoder, which may lead to denial of service upon opening an email with a TNEF attachment.
CVSS 4.3
CVE-2026-62643 WRITEUP HIGH WRITEUP
Roundcube Webmail - Server-Side Request Forgery (SSRF)
In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, insufficient Cascading Style Sheets (CSS) sanitization in HTML e-mail messages may lead to SSRF or Information Disclosure, e.g., if stylesheet links point to local network hosts. NOTE: this issue exists because of insufficient fixes for CVE-2026-35540 and CVE-2026-48843.
CVSS 7.2
CVE-2026-62644 WRITEUP MEDIUM WRITEUP
Roundcube Webmail - Authentication Bypass by Spoofing
In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, the password plugin of the Roundcube Webmail was subject to username spoofing via session data, which could lead to account takeover.
CVSS 6.4
CVE-2026-62641 WRITEUP MEDIUM WRITEUP
Roundcube Webmail - Allocation of Resources Without Limits or Throttling
In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, the TNEF decoder was subject to denial of service via a crafted compressed-RTF size.
CVSS 4.3
CVE-2026-62642 WRITEUP MEDIUM WRITEUP
Roundcube Webmail - Loop with Unreachable Exit Condition ('Infinite Loop')
In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, an infinite loop was discovered in the TNEF decoder, which may lead to denial of service upon opening an email with a TNEF attachment.
CVSS 4.3
CVE-2026-62643 WRITEUP HIGH WRITEUP
Roundcube Webmail - Server-Side Request Forgery (SSRF)
In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, insufficient Cascading Style Sheets (CSS) sanitization in HTML e-mail messages may lead to SSRF or Information Disclosure, e.g., if stylesheet links point to local network hosts. NOTE: this issue exists because of insufficient fixes for CVE-2026-35540 and CVE-2026-48843.
CVSS 7.2
CVE-2026-62644 WRITEUP MEDIUM WRITEUP
Roundcube Webmail - Authentication Bypass by Spoofing
In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, the password plugin of the Roundcube Webmail was subject to username spoofing via session data, which could lead to account takeover.
CVSS 6.4
CVE-2026-48842 WRITEUP HIGH WRITEUP
Roundcube Webmail - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1 has Pre-authentication SQL injection in the virtuser_query plugin via a preg_replace() backslash escape bypass.
CVSS 8.1
CVE-2026-48843 WRITEUP HIGH WRITEUP
Roundcube Webmail - Server-Side Request Forgery (SSRF)
Roundcube Webmail 1.6.x between 1.6.14 and 1.6.16,and 1.7.x before 1.7.1 has Insufficient Cascading Style Sheets (CSS) sanitization in HTML e-mail messages may lead to SSRF or Information Disclosure, e.g., if stylesheet links point to local network hosts. The issue stems from an insufficient fix for CVE-2026-35540.
CVSS 7.2
CVE-2026-48844 WRITEUP HIGH WRITEUP
Roundcube Webmail - Always-Incorrect Control Flow Implementation
Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1 has insecure code evaluation logic in LDAP the autovalues option that could lead to code injection. (Support for code evaluation has been removed in 1.6.16 and 1.7.1.)
CVSS 7.5
CVE-2026-48845 WRITEUP MEDIUM WRITEUP
Roundcube Webmail - Incorrect Resource Transfer Between Spheres
In Roundcube Webmail 1.6.x between 1.6.14 and 1.6.16 and 1.7.x before 1.7.1, remote image blocking was not honored for URLs pointing to local/private destinations, which may lead to information disclosure or privilege escalation via a text/html email message.
CVSS 6.5
CVE-2026-48846 WRITEUP MEDIUM WRITEUP
Roundcube Webmail - Incorrect Resource Transfer Between Spheres
In Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1, the remote image blocking feature can be bypassed via a crafted CSS var() value in an e-mail message, which may lead to information disclosure or access-control bypass.
CVSS 6.5
CVE-2026-48847 WRITEUP LOW WRITEUP
Roundcube Webmail - Incorrect Resource Transfer Between Spheres
Roundcube Webmail 1.6.x before 1.6.16, and 1.7.x before 1.7.1 allows pre-authentication arbitrary file deletion via redis/memcache session poisoning bypass.
CVSS 3.7
CVE-2026-48848 WRITEUP HIGH WRITEUP
Roundcube Webmail - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7 has insufficient HTML sanitization that could lead to Cascading Style Sheets (CSS) injection via an SVG document that has an animate element with the attributeName attribute.
CVSS 7.2
CVE-2026-48849 WRITEUP MEDIUM WRITEUP
Roundcube Webmail - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
In Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1, an unsanitized subject field in the draft restored value could lead to stored XSS/HTML/CSS injection on shared mailboxes.
CVSS 4.4
CVE-2026-48842 WRITEUP HIGH WRITEUP
Roundcube Webmail - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1 has Pre-authentication SQL injection in the virtuser_query plugin via a preg_replace() backslash escape bypass.
CVSS 8.1
CVE-2026-48843 WRITEUP HIGH WRITEUP
Roundcube Webmail - Server-Side Request Forgery (SSRF)
Roundcube Webmail 1.6.x between 1.6.14 and 1.6.16,and 1.7.x before 1.7.1 has Insufficient Cascading Style Sheets (CSS) sanitization in HTML e-mail messages may lead to SSRF or Information Disclosure, e.g., if stylesheet links point to local network hosts. The issue stems from an insufficient fix for CVE-2026-35540.
CVSS 7.2
CVE-2026-48844 WRITEUP HIGH WRITEUP
Roundcube Webmail - Always-Incorrect Control Flow Implementation
Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1 has insecure code evaluation logic in LDAP the autovalues option that could lead to code injection. (Support for code evaluation has been removed in 1.6.16 and 1.7.1.)
CVSS 7.5
CVE-2026-48845 WRITEUP MEDIUM WRITEUP
Roundcube Webmail - Incorrect Resource Transfer Between Spheres
In Roundcube Webmail 1.6.x between 1.6.14 and 1.6.16 and 1.7.x before 1.7.1, remote image blocking was not honored for URLs pointing to local/private destinations, which may lead to information disclosure or privilege escalation via a text/html email message.
CVSS 6.5
CVE-2026-48846 WRITEUP MEDIUM WRITEUP
Roundcube Webmail - Incorrect Resource Transfer Between Spheres
In Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1, the remote image blocking feature can be bypassed via a crafted CSS var() value in an e-mail message, which may lead to information disclosure or access-control bypass.
CVSS 6.5