Security Advisory

CVE-2026-75004

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-17 12:53:50

Last updated 2026-08-17 14:37:04

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, improper rule name quoting could lead to managesieve_disabled_actions setting bypass via a crafted rule name in a Sieve script. This issue only affects Roundcube instances using the managesieve plugin.

← Browse all CVEs View on cve.org ↗