PULSEUnderground Intel

LIVE27signals / 24h

FEED

ransomlockbit5 reclama a lcww.com.eg · EG · Not Foundransomlockbit5 reclama a neweramachines.com · US · Manufacturingransomlockbit5 reclama a grupoabg.com · MX · Manufacturingransomqilin reclama a KD Corp · KR · Not Foundransomakira reclama a Videk · GB · Technologyransomakira reclama a Boyle, Pecharich, Cline, Whittington and Stallings · Professional Servicesransom0x00 reclama a bienestarempresarial · MX · Professional Servicesransomiah6477 reclama a middleby · US · Manufacturingransomiah6477 reclama a sunshine-mills · Agriculture and Food Productionransomakira reclama a Svd (Sun Valley Dairy) · US · Agriculture and Food Productionransomqilin reclama a Hocon Gas · NG · Energy & Utilitiesransomqilin reclama a HyperGen · US · Technologyransomqilin reclama a Chattanooga Shooting Supplies · US · Retail & E-Commerceransomqilin reclama a Brame Telecom · BR · Technologyransomlockbit5 reclama a lcww.com.eg · EG · Not Foundransomlockbit5 reclama a neweramachines.com · US · Manufacturingransomlockbit5 reclama a grupoabg.com · MX · Manufacturingransomqilin reclama a KD Corp · KR · Not Foundransomakira reclama a Videk · GB · Technologyransomakira reclama a Boyle, Pecharich, Cline, Whittington and Stallings · Professional Servicesransom0x00 reclama a bienestarempresarial · MX · Professional Servicesransomiah6477 reclama a middleby · US · Manufacturingransomiah6477 reclama a sunshine-mills · Agriculture and Food Productionransomakira reclama a Svd (Sun Valley Dairy) · US · Agriculture and Food Productionransomqilin reclama a Hocon Gas · NG · Energy & Utilitiesransomqilin reclama a HyperGen · US · Technologyransomqilin reclama a Chattanooga Shooting Supplies · US · Retail & E-Commerceransomqilin reclama a Brame Telecom · BR · Technology

CVE Watch—

CVE-2021-44026

Roundcube Webmail SQL Injection Vulnerability

CVSS

—

No CVSS

EPSS

69.9%

p99

KEV

YES

Jun 22, 2023

Exploit Today

80

0-100

Published: — · Last modified: —

EPSS · 30d

41.9%EPSS · 30 days69.9%

2026-09-162026-10-14

KEV catalog record

Product

Roundcube / Roundcube Webmail

Vulnerability

Roundcube Webmail SQL Injection Vulnerability

Added to KEV

Jun 22, 2023

Remediate by

Jul 13, 2023

Known ransomware use

No

Summary description

Roundcube Webmail is vulnerable to SQL injection via search or search_params.

Required action

Apply updates per vendor instructions.

Notes

https://roundcube.net/news/2021/11/12/security-updates-1.4.12-and-1.3.17-released; https://nvd.nist.gov/vuln/detail/CVE-2021-44026

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2020-12641—

KEV—80Roundcube Webmail Remote Code Execution Vulnerability—CVE-2017-16651—

KEV—80Roundcube Webmail File Disclosure Vulnerability—CVE-2020-35730—

KEV—80Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability—