CVE-2026-75002 | Roundcube up to 1.6.17/1.7.2 command injection

August 17, 2026 Yanac

A vulnerability identified as critical has been detected in Roundcube up to 1.6.17/1.7.2. This affects an unknown function. This manipulation causes command injection.

This vulnerability is tracked as CVE-2026-75002. The attack is possible to be carried out remotely. No exploit exists.

You should upgrade the affected component.VulDB Recent EntriesRead More