CVE-2026-114732 | Roundcube up to 1.6.19/1.7.4 IMAP rcube_user::query improper authentication

October 22, 2026 Yanac

A vulnerability, which was classified as critical, has been found in Roundcube up to 1.6.19/1.7.4. This vulnerability affects the function rcube_user::query of the component IMAP. The manipulation leads to improper authentication.

This vulnerability is listed as CVE-2026-114732. The attack may be initiated remotely. There is no available exploit.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More