CVE-2026-114728 | Roundcube Webmail up to 1.6.19/1.7.4 FuncIRI to/from/by cross site scripting

October 22, 2026 Yanac

A vulnerability classified as problematic has been found in Roundcube Webmail up to 1.6.19/1.7.4. This vulnerability affects unknown code of the component FuncIRI Handler. Performing a manipulation of the argument to/from/by results in cross site scripting.

This vulnerability is cataloged as CVE-2026-114728. It is possible to initiate the attack remotely. There is no exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More