https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-04T23:32:05.765050+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/certfr-2026-avi-0987 certfr-2026-avi-0987 — De multiples vulnérabilités ont été découvertes dans Roundcube. Certaines d'entre elles permettent à un attaquant de pr… 2026-10-04T23:32:05.767461+00:00 certfr-2026-avi-0987 https://vulnerability.circl.lu/vuln/fkie_cve-2026-74998 fkie_cve-2026-74998 2026-10-04T23:32:05.767706+00:00

In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, responses from the CSS (Cascading Style Sheets) proxy were not validated, which may result in information disclosure or XSS (cross-site scripting) via MIME sniffing.

 https://vulnerability.circl.lu/vuln/ghsa-6pvc-73xq-46hq GHSA-6pvc-73xq-46hq 2026-10-04T23:32:05.767781+00:00

In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, responses from the CSS (Cascading Style Sheets) proxy were not validated, which may result in information disclosure or XSS (cross-site scripting) via MIME sniffing.

 https://vulnerability.circl.lu/vuln/ubuntu-cve-2026-74998 UBUNTU-CVE-2026-74998 2026-10-04T23:32:05.767805+00:00

Affected: Ubuntu:Pro:16.04:LTS: roundcube, Ubuntu:Pro:18.04:LTS: roundcube, Ubuntu:Pro:20.04:LTS: roundcube, Ubuntu:Pro:22.04:LTS: roundcube, Ubuntu:Pro:24.04:LTS: roundcube, Ubuntu:Pro:26.04:LTS: roundcube

In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, responses from the CSS (Cascading Style Sheets) proxy were not validated, which may result in information disclosure or XSS (cross-site scripting) via MIME sniffing.