Roundcube security update 1.6.20 is not yet available in cPanel & WHM: Roundcube vulnerabilities prior to version 1.6.20

Symptoms

Roundcube released a security update on October 19th, 2026 in v1.6.20.

Cause

Roundcube versions prior to 1.6.20 and 1.7.5 have security vulnerabilities, and an internal case, CPANEL-57939, has been opened for the development team to review and address this.

Resolution

At this time, this security update is now available in the following cPanel versions:

110.0.154

134.0.67

136.0.51

138.0.19

To receive this update, please upgrade to the latest patched version: How do I update cPanel/WHM?