Debian/roundcube: high 8.1
Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an incorrect authorization vulnerability in the Modoboa driver of the password plugin. The driver took the first entry of the acco
Action: Upgrade roundcube to 1.6.20+dfsg-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.6.20+dfsg-1 | - |
Fixed versions
| 1.6.20+dfsg-1 |
Sources
- osv: DEBIAN-CVE-2026-114715#Debian:14/roundcube
- https://security-tracker.debian.org/tracker/CVE-2026-114715
published · modified · JSON