Archive2026Mar 18, 2026Roundcube round two: three more sanitizer bypassesMar 16, 2026Perfex CRM <=3.4.0 allows unauthenticated RCE via insecure deserializationFeb 10, 2026Hello worldFeb 08, 2026Roundcube Webmail <1.5.13 / <1.6.13 allows attackers to force remote image loads via SVG feImage