PULSEUnderground Intel

EN VIVO27señales / 24h

FEED

ransomlockbit5 reclama a lcww.com.eg · EG · Not Foundransomlockbit5 reclama a neweramachines.com · US · Manufacturingransomlockbit5 reclama a grupoabg.com · MX · Manufacturingransomqilin reclama a KD Corp · KR · Not Foundransomakira reclama a Videk · GB · Technologyransomakira reclama a Boyle, Pecharich, Cline, Whittington and Stallings · Professional Servicesransom0x00 reclama a bienestarempresarial · MX · Professional Servicesransomiah6477 reclama a middleby · US · Manufacturingransomiah6477 reclama a sunshine-mills · Agriculture and Food Productionransomakira reclama a Svd (Sun Valley Dairy) · US · Agriculture and Food Productionransomqilin reclama a Hocon Gas · NG · Energy & Utilitiesransomqilin reclama a HyperGen · US · Technologyransomqilin reclama a Chattanooga Shooting Supplies · US · Retail & E-Commerceransomqilin reclama a Brame Telecom · BR · Technologyransomlockbit5 reclama a lcww.com.eg · EG · Not Foundransomlockbit5 reclama a neweramachines.com · US · Manufacturingransomlockbit5 reclama a grupoabg.com · MX · Manufacturingransomqilin reclama a KD Corp · KR · Not Foundransomakira reclama a Videk · GB · Technologyransomakira reclama a Boyle, Pecharich, Cline, Whittington and Stallings · Professional Servicesransom0x00 reclama a bienestarempresarial · MX · Professional Servicesransomiah6477 reclama a middleby · US · Manufacturingransomiah6477 reclama a sunshine-mills · Agriculture and Food Productionransomakira reclama a Svd (Sun Valley Dairy) · US · Agriculture and Food Productionransomqilin reclama a Hocon Gas · NG · Energy & Utilitiesransomqilin reclama a HyperGen · US · Technologyransomqilin reclama a Chattanooga Shooting Supplies · US · Retail & E-Commerceransomqilin reclama a Brame Telecom · BR · Technology

← Todos los CVEs

CVE Watch—

CVE-2021-44026

Roundcube Webmail SQL Injection Vulnerability

CVSS

—

Sin CVSS

EPSS

69.9%

p99

KEV

SÍ

22 jun 2023

Exploit Today

80

0-100

Publicado: — · Última mod.: —

EPSS · 30d

41.9%EPSS · 30 días69.9%

2026-09-162026-10-14

Ficha del catálogo KEV

Producto

Roundcube / Roundcube Webmail

Vulnerabilidad

Roundcube Webmail SQL Injection Vulnerability

Añadido a KEV

22 jun 2023

Remediar antes de

13 jul 2023

Uso conocido en ransomware

No

Descripción resumida

Roundcube Webmail is vulnerable to SQL injection via search or search_params.

Acción requerida

Apply updates per vendor instructions.

Notas

https://roundcube.net/news/2021/11/12/security-updates-1.4.12-and-1.3.17-released; https://nvd.nist.gov/vuln/detail/CVE-2021-44026

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2020-12641—

KEV—80Roundcube Webmail Remote Code Execution Vulnerability—CVE-2017-16651—

KEV—80Roundcube Webmail File Disclosure Vulnerability—CVE-2020-35730—

KEV—80Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability—