CVE-2021-44026

CRITICAL9.8⚠ KEVEPSS 72.5%

Roundcube Webmail SQL Injection Vulnerability

Published: 11/19/2021Modified: 5/29/2026Added to CISA KEV: 6/22/2023

Description

Roundcube before 1.3.17 and 1.4.x before 1.4.12 is prone to a potential SQL injection via search or search_params.

Affected packages (2)

CVSS scores

SourceVersionSeverityVector
osvCVSS 3.1CRITICAL9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References (8)