CVE-2026-114727 | Roundcube Webmail up to 1.6.19/1.7.4 Contact Photo Upload unrestricted upload

October 22, 2026 Yanac

A vulnerability classified as critical was found in Roundcube Webmail up to 1.6.19/1.7.4. This issue affects some unknown processing of the component Contact Photo Upload. Executing a manipulation can lead to unrestricted upload.

This vulnerability is registered as CVE-2026-114727. It is possible to launch the attack remotely. No exploit is available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More