RaqibCTI
Search the threat graph — actor, CVE, technique, victim…
⌘K
◇ SIGN IN
Knowledge
/
KEV Catalog
/
CVE-2025-49113
Corpus
+ Request intel
workspace
CVE
CVE-2025-49113
P2
RoundCube Webmail Deserialization of Untrusted Data Vulnerability
Roundcube · Webmail
Date added (CISA)
2026-02-20
Remediation due
2026-03-13
Known ransomware use
Not indicated
Remediation priority
P2 — past CISA due date
Associated with
Related to
←
Lazarus Group (TraderTraitor cluster) / APT38 / BlueNoroff · SPECTRE
campaign
Correlated cluster
2026-09-16
←
FudModule
campaign
Correlated cluster
2026-09-03
←
payload · XMRig
campaign
Correlated cluster
2026-09-03
←
JSCeal
campaign
Correlated cluster
2026-09-02
←
Dysphoria
campaign
Correlated cluster
2026-08-24
←
CVE-2026-68820
campaign
Correlated cluster
2026-08-11
Overview
ATT&CK
Related
Related
Nothing linked yet
No threat actor or pipeline report has been cross-referenced against this CVE yet. The associated-with rail above shows any asserted relationships.
Source:
NVD ↗
·
CISA KEV Catalog ↗
CVE-2025-49113: RoundCube Webmail Deserialization of Untrusted Data Vulnerability · RaqibCTI