PULSE
ESEN
FEED
ransomn0n reclama a Company #137 · CAransomn0n reclama a Company #136 · DKransomn0n reclama a Company #135 · IDransomn0n reclama a Company #134 · USransomn0n reclama a Company #133 · USransomredact reclama a Omni Hotels & Resorts · US · Hospitalityransomakira reclama a Westboro Partnersransomakira reclama a System Plus · Technologyransomakira reclama a David L Wade & Associates · Professional Servicesransomakira reclama a Source Energy Services · CA · Energy & Utilitiesransomaoqin reclama a Sistel · BR · Technologyransombyod reclama a First and Final Warning - IHG Hotels & Resorts (Estate) · Hospitalityransomqilin reclama a Calvary Christian College · AU · Educationransomeverstake reclama a ne*****h.comransomn0n reclama a Company #137 · CAransomn0n reclama a Company #136 · DKransomn0n reclama a Company #135 · IDransomn0n reclama a Company #134 · USransomn0n reclama a Company #133 · USransomredact reclama a Omni Hotels & Resorts · US · Hospitalityransomakira reclama a Westboro Partnersransomakira reclama a System Plus · Technologyransomakira reclama a David L Wade & Associates · Professional Servicesransomakira reclama a Source Energy Services · CA · Energy & Utilitiesransomaoqin reclama a Sistel · BR · Technologyransombyod reclama a First and Final Warning - IHG Hotels & Resorts (Estate) · Hospitalityransomqilin reclama a Calvary Christian College · AU · Educationransomeverstake reclama a ne*****h.com
← Todos os CVEs
CVE Watch—

CVE-2021-44026

Roundcube Webmail SQL Injection Vulnerability

CVSS

—

Sem CVSS

EPSS

69.9%

p99

KEV

SIM

22 de jun. de 2023

Exploit Today

80

0-100

Publicado: — · Última mod.: —

EPSS · 30d
69.9%EPSS · 30 dias69.9%
2026-10-082026-11-05
Ficha do catálogo KEV

Produto

Roundcube / Roundcube Webmail

Vulnerabilidade

Roundcube Webmail SQL Injection Vulnerability

Adicionado ao KEV

22 de jun. de 2023

Corrigir até

13 de jul. de 2023

Uso conhecido em ransomware

Não

Descrição resumida

Roundcube Webmail is vulnerable to SQL injection via search or search_params.

Ação necessária

Apply updates per vendor instructions.

Notas

https://roundcube.net/news/2021/11/12/security-updates-1.4.12-and-1.3.17-released; https://nvd.nist.gov/vuln/detail/CVE-2021-44026

CVEs relacionados
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2020-12641—
99.7%
KEV—80Roundcube Webmail Remote Code Execution Vulnerability—CVE-2017-16651—
98.8%
KEV—80Roundcube Webmail File Disclosure Vulnerability—CVE-2020-35730—
98.4%
KEV—80Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability—