WE
Product
Webmail
by Roundcube · last CVE Oct 22, 2026
On CISA KEVExploited in the wild
126
CVEs
11
On KEV
10.0
Max CVSS
20
New 30D
Severity mix
Critical 10High 29Medium 58Low 5
Watch

Add Webmail to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-49113
In wildKEV
8.8
100%
Jun 2
RoundCube Webmail Deserialization of Untrusted Data Vulnerability
Affected: before 1.5.10; 1.6.0 before 1.6.11
CVE-2017-16651
In wildKEV
7.8
46%
Nov 9
Roundcube Webmail File Disclosure Vulnerability
Affected: through 1.1.9; 1.2.0; 1.2.1; 1.2.2; 1.2.3; 1.2.4; +5 more
Showing 2