> TritonInfoSec News
Home / Sep 27, 2026 / Story
0
#10 SecurityWeek general September 25, 2026 at 06:57 UTC

Roundcube Webmail Vulnerability in Attackers’ Crosshairs

By Ionut Arghire

AI Summary

CVE-2026-48842, an unauthenticated SQL injection vulnerability in Roundcube Webmail, is being actively exploited in the wild. Roundcube is widely deployed by governments and organizations globally and has been a repeated target of nation-state actors including APT28, making prompt patching essential for any exposed instance.

Read full article → https://www.securityweek.com/roundcube-webmail-vul…

Relevance score: 74.0/100

# More from September 27

  1. 1
    Attackers Bypass WAFs to Exploit Oracle PeopleSoft Flaw and Deploy Web Shells The Hacker News
  2. 2
    ShinyHunters uses WAF bypass trick in Oracle PeopleSoft attacks BleepingComputer
  3. 3
    SharePoint RCE and MikroTik RouterOS Flaws Actively Exploited in the Wild The Hacker News
  4. 4
    Kiteworks Urges Customers to Shut Down Systems for 9 Hours Over Possible Cyber Attack The Hacker News
  5. 5
    Bitget Says Suspected North Korean Hackers Stole $351.6M After Backend Compromise The Hacker News
  6. 6
    Army soldier sentenced for spree of attacks on AT&T, Snowflake and other major companies CyberScoop
  7. 7
    CISA warns of Sharepoint, WSO2, Adobe Commerce flaws exploited in attacks BleepingComputer
  8. 8
    Lunex Stealer Abuses AMD Driver to Disable Security Monitoring and Steal Browser Credentials The Hacker News
  9. 9
    Elementor CSRF Flaw Lets Attackers Take Over Sites After Admin Clicks Crafted Link The Hacker News