https://exploit-radar.com/en/flux/marques/roundcube.xml Exploit Radar: exploited Roundcube vulnerabilities The latest additions to CISA’s catalog of exploited vulnerabilities for Roundcube products. 2026-02-20T00:00:00Z Exploit Radar https://exploit-radar.com/en/cve/CVE-2025-49113/ CVE-2025-49113 — Roundcube Webmail 2026-02-20T00:00:00Z Apply the patches or mitigations from Roundcube; if none are available, stop using the product. For cloud services, follow the guidance from Roundcube. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on February 20, 2026. https://exploit-radar.com/en/cve/CVE-2025-68461/ CVE-2025-68461 — Roundcube Webmail 2026-02-20T00:00:00Z Apply the patches or mitigations from Roundcube; if none are available, stop using the product. For cloud services, follow the guidance from Roundcube. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on February 20, 2026. https://exploit-radar.com/en/cve/CVE-2024-42009/ CVE-2024-42009 — Roundcube Webmail 2025-06-09T00:00:00Z Apply the patches or mitigations from Roundcube; if none are available, stop using the product. For cloud services, follow the guidance from Roundcube. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on June 9, 2025. https://exploit-radar.com/en/cve/CVE-2024-37383/ CVE-2024-37383 — Roundcube Webmail 2024-10-24T00:00:00Z Apply the patches or mitigations from Roundcube; if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on October 24, 2024. https://exploit-radar.com/en/cve/CVE-2020-13965/ CVE-2020-13965 — Roundcube Webmail 2024-06-26T00:00:00Z Apply the patches or mitigations from Roundcube; if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on June 26, 2024. https://exploit-radar.com/en/cve/CVE-2023-43770/ CVE-2023-43770 — Roundcube Webmail 2024-02-12T00:00:00Z Apply the patches or mitigations from Roundcube; if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on February 12, 2024. https://exploit-radar.com/en/cve/CVE-2023-5631/ CVE-2023-5631 — Roundcube Webmail 2023-10-26T00:00:00Z Apply the patches or mitigations from Roundcube; if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on October 26, 2023. https://exploit-radar.com/en/cve/CVE-2020-12641/ CVE-2020-12641 — Roundcube Webmail 2023-06-22T00:00:00Z Apply the security update from Roundcube. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on June 22, 2023. https://exploit-radar.com/en/cve/CVE-2021-44026/ CVE-2021-44026 — Roundcube Webmail 2023-06-22T00:00:00Z Apply the security update from Roundcube. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on June 22, 2023. https://exploit-radar.com/en/cve/CVE-2020-35730/ CVE-2020-35730 — Roundcube Webmail 2023-06-22T00:00:00Z Apply the security update from Roundcube. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on June 22, 2023. https://exploit-radar.com/en/cve/CVE-2017-16651/ CVE-2017-16651 — Roundcube Webmail 2021-11-03T00:00:00Z Apply the security update from Roundcube. CISA deadline: 181 days. Added to CISA’s catalog of exploited vulnerabilities on November 3, 2021.