CVE intelligence

CVE-2026-113386

Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 are affected by IMAP command injection. A remote authenticated attacker can exploit t

Published 2026-10-20 · CVSS high

NIST record