Roundcube Webmail: known exploited vulnerabilities
Entries7
Ransomware-linked0
First added2023-10-26
Latest2026-02-20
EPSS compared
98.9%
82.8%
76.5%
75.8%
73.2%
63.6%
26.8%
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2025-68461 | Roundcube Webmail | 2026-02-20 | 26.8% | Unknown |
| CVE-2025-49113 | Roundcube Webmail | 2026-02-20 | 98.9% | Unknown |
| CVE-2024-42009 | Roundcube Webmail | 2025-06-09 | 82.8% | Unknown |
| CVE-2024-37383 | Roundcube Webmail | 2024-10-24 | 73.2% | Unknown |
| CVE-2020-13965 | Roundcube Webmail | 2024-06-26 | 76.5% | Unknown |
| CVE-2023-43770 | Roundcube Webmail | 2024-02-12 | 63.6% | Unknown |
| CVE-2023-5631 | Roundcube Webmail | 2023-10-26 | 75.8% | Unknown |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.