Roundcube CVE-2026-48842: Pre-Auth SQL Injection Exploited
Roundcube CVE-2026-48842: pre-auth SQL injection is being exploited
CVE-2026-48842 is a pre-authentication SQL injection in Roundcube Webmail's optional virtuser_query plugin. Roundcube fixed it in ve
404-founders.com2 min read