https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-04T23:31:35.232245+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/certfr-2026-avi-0987 certfr-2026-avi-0987 — De multiples vulnérabilités ont été découvertes dans Roundcube. Certaines d'entre elles permettent à un attaquant de pr… 2026-10-04T23:31:35.236266+00:00 certfr-2026-avi-0987 https://vulnerability.circl.lu/vuln/fkie_cve-2026-74997 fkie_cve-2026-74997 2026-10-04T23:31:35.236336+00:00

In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, the cmd_learn driver of the markasjunk plugin is subject to remote code execution via crafted placeholder replacement values. This issue only affects Roundcube instances using the markasjunk plugin with its cmd_learn driver.

 https://vulnerability.circl.lu/vuln/ghsa-q5rh-mmp4-ppgq GHSA-q5rh-mmp4-ppgq 2026-10-04T23:31:35.236396+00:00

In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, the cmd_learn driver of the markasjunk plugin is subject to remote code execution via crafted placeholder replacement values. This issue only affects Roundcube instances using the markasjunk plugin with its cmd_learn driver.

 https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-74997 UBUNTU-CVE-2026-74997 2026-10-04T23:31:35.236429+00:00

Affected: Ubuntu:Pro:16.04:LTS: roundcube, Ubuntu:Pro:18.04:LTS: roundcube, Ubuntu:Pro:20.04:LTS: roundcube, Ubuntu:Pro:22.04:LTS: roundcube, Ubuntu:Pro:24.04:LTS: roundcube, Ubuntu:Pro:26.04:LTS: roundcube

In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, the cmd_learn driver of the markasjunk plugin is subject to remote code execution via crafted placeholder replacement values. This issue only affects Roundcube instances using the markasjunk plugin with its cmd_learn driver.