CVE-2026-62643 | Roundcube Webmail up to 1.6.16/1.7.1 CSS server-side request forgery

July 14, 2026 Yanac

A vulnerability was found in Roundcube Webmail up to 1.6.16/1.7.1. It has been declared as problematic. This vulnerability affects unknown code of the component CSS. Executing a manipulation can lead to server-side request forgery.

This vulnerability is registered as CVE-2026-62643. It is possible to launch the attack remotely. No exploit is available.VulDB Recent EntriesRead More