CVE-2026-62641 | Roundcube up to 1.6.16/1.7.1 TNEF decoder cross site scripting

July 14, 2026 Yanac

A vulnerability classified as problematic was found in Roundcube up to 1.6.16/1.7.1. Affected by this vulnerability is an unknown functionality of the component TNEF decoder. The manipulation results in cross site scripting.

This vulnerability was named CVE-2026-62641. The attack may be performed from remote. There is no available exploit.VulDB Recent EntriesRead More