Security Advisory

CVE-2026-75002

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-17 12:48:41
Last updated 2026-08-18 03:55:29
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, mail search and LITERAL+ byte-count desynchronization could lead to information disclosure or privilege escalation via IMAP command injection.