Roundcube update due to CVE vulnerability CVE-2025-68461

Marek Rudolf

• December 23, 2025 14:25

Due to the CVE-2025-68461 and CVE-2025-68460 vulnerabilities, is there any information on when the cPanel update containing the new, improved version of roundcube 1.6.12 will be released?

• 

  cPRex Jurassic Moderator

  • December 23, 2025 15:18

  Hey hey!  We actually fixed this before there were CVE numbers assigned to the issue.  The issues are fixed in case CPANEL-50701 but it *just* missed the released cutoff for this year.

  This will likely be released the week of January 5th as they are relatively low priority.

   

  1

Please sign in to leave a comment.