CVE-2026-75007 | Roundcube Webmail up to 1.6.17/1.7.2 LDAP Search Filter ldap injection

August 17, 2026 Yanac

A vulnerability, which was classified as critical, was found in Roundcube Webmail up to 1.6.17/1.7.2. This issue affects some unknown processing of the component LDAP Search Filter. Such manipulation leads to ldap injection.

This vulnerability is traded as CVE-2026-75007. The attack may be launched remotely. There is no exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More