Vulnerability

2026

• Mar 18, 2026 Roundcube round two: three more sanitizer bypasses
• Mar 16, 2026 Perfex CRM <=3.4.0 allows unauthenticated RCE via insecure deserialization
• Feb 08, 2026 Roundcube Webmail <1.5.13 / <1.6.13 allows attackers to force remote image loads via SVG feImage