CVE-2026-114714 | Roundcube Webmail up to 1.6.19/1.7.4 squirrelmail_usercopy plugin login name path traversal

October 22, 2026 Yanac

A vulnerability marked as problematic has been reported in Roundcube Webmail up to 1.6.19/1.7.4. This vulnerability affects unknown code of the component squirrelmail_usercopy plugin. This manipulation of the argument login name causes path traversal.

This vulnerability is registered as CVE-2026-114714. Remote exploitation of the attack is possible. No exploit is available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More