R
Vendor security profile11 actively exploited CVEs
roundcube
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs36
Critical6
CISA KEV11
Public exploit11
Patch rate%58
Avg. CVSS6.8
12-month vulnerability rate
0
1
0
0
0
9
1
0
5
10
0
0
CVE KEV
CVE severity distribution
36toplam CVE
Critical6 (17%)
High9 (25%)
Medium18 (50%)
Low1 (3%)
Uncertain2 (6%)
Patch and exploitation view
%58
Verified patch
%31
CISA KEV
%31
Public exploit
21Patch available
0Partial
11Workaround
0Vendor: no patch
4Unknown
Latest vulnerabilities
6.4
CVE-2026-75010
Vulnerability in Roundcube Webmail
R
Patch verifiedEPSS %0
5.4
CVE-2026-75007
Command injection in Roundcube Webmail
R
Patch verifiedEPSS %1
5.8
CVE-2026-75006
Server-side request forgery in Roundcube Webmail
R
Patch verifiedEPSS %0
4.3
CVE-2026-75004
Command injection in Roundcube Webmail
R
Patch status unknownEPSS %0
5.8
CVE-2026-75003
Vulnerability in Roundcube Webmail
R
Patch verifiedEPSS %1
7.1
CVE-2026-75002
Command injection in Roundcube Webmail
R
Patch verifiedEPSS %2
5.8
CVE-2026-75000
Vulnerability in Roundcube Webmail
R
Patch status unknownEPSS %0
5.4
CVE-2026-74999
Cross-site scripting in Roundcube Webmail
R
Patch verifiedEPSS %0
7.2
CVE-2026-74998
Cross-site scripting in Roundcube Webmail
R
Patch verifiedEPSS %0
8.8
CVE-2026-74997
OS command injection in Roundcube Webmail
R
Patch verifiedEPSS %1