CVE

CVE-2021-44026

Roundcube Webmail SQL Injection Vulnerability

Roundcube · Roundcube Webmail

Date added (CISA)

2023-06-22

Remediation due

2023-07-13

Known ransomware use

Not indicated

Remediation priority

P2 — past CISA due date

Description

Roundcube Webmail is vulnerable to SQL injection via search or search_params.