Veille CVE

Jeudi 10 septembre 2026

1 CVE

  1. CVE-2026-75003 9.8 Critique

    Roundcube Webmail

    In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, an unclosed url() in a FuncIRI attribute of an SVG image could evade the remote image blocking, which may lead to information disclosure or privilege escalation.