{"uuid": "543376b7-000d-4acf-8588-858a6d5fc53e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48842", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/117333123897233909", "content": "\ud83d\udea8 Roundcube SQL injection flaw actively exploited months after patches were released\nThe Canadian Centre for Cyber Security has warned that CVE-2026-48842, a high-severity vulnerability in Roundcube Webmail, is being exploited in the wild.\u2800Roundcube is an open-source webmail application that lets people access email through a browser.\nThe flaw affects its virtuser_query plugin and allows SQL injection before authentication.\u2800Key details:\n\u2022 CVSS score: 8.1\u2022 No attacker credentials required\u2022 No user interaction required\u2022 Affects Roundcube 1.6.x before 1.6.16 and 1.7.x before 1.7.1\u2800Roundcube released the original fixes on May 24, 2026. Canada added the exploitation warning to its advisory on September 21, citing open-source reporting.\nThe advisory does not identify the attackers, victims or scale of exploitation.\u2800Administrators should update affected installations promptly. Newer security releases, 1.6.19 and 1.7.4, also address additional vulnerabilities.\nSource: https://www.cyber.gc.ca/en/alerts-advisories/roundcube-security-advisory-av26-503", "creation_timestamp": "2026-09-25T18:36:28.270327Z"}