Security Advisory

CVE-2026-26079

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2026-02-11 04:27:24

Last updated 2026-02-11 16:06:28

Assigner mitre

State PUBLISHED

Roundcube Webmail before 1.5.13 and 1.6 before 1.6.13 allows Cascading Style Sheets (CSS) injection, e.g., because comments are mishandled.