Roundcube - Multiple CVEs

mtindor

• July 10, 2026 00:02

https://cybersecuritynews.com/roundcube-0-click-vulnerability/

CVE-2026-54432

CVE-2026-54433

These and other vulnerabilities are fixed in Roundcube 1.7

Is cPanel / WebPros aware of this?

• 

  cPRex Jurassic Moderator

  • July 10, 2026 13:48

  Hey hey!  We have this fixed already as part of case CPANEL-54417 so it will be in the next cPanel build when that happens!

  2
• 

  Wojciech Babicz

  • July 14, 2026 11:05

  This is CRITICAL vulnerability. Fix should be released immediately - especially since the software manufacturer has already released the patch. Now every e-mail account can be affected. 

  0
• 

  cPRex Jurassic Moderator

  • July 14, 2026 15:44

  We're planning on releasing the next build either later today or tomorrow so there won't be much of a wait.

  0
• 

  cPRex Jurassic Moderator

  • July 15, 2026 14:03

  This did end up getting released last night!

  0

Please sign in to leave a comment.