CVE-2026-74997 | Roundcube Webmail cmd_learn code injection

August 17, 2026 Yanac

A vulnerability labeled as critical has been found in Roundcube Webmail. This impacts an unknown function of the component cmd_learn. Such manipulation leads to code injection.

This vulnerability is listed as CVE-2026-74997. The attack may be performed from remote. There is no available exploit.VulDB Recent EntriesRead More