Winter Vivern

Mentions · 7d0
Mentions · 30d0
All mentions2
First seenAug 21, 2026
Last mentionedSep 24, 2026

Timeline

2 articles · newest first

Hackers now exploit critical Roundcube flaw in code injection attacks

Attackers are exploiting patched Roundcube SQL injection CVE-2026-48842 to bypass login and steal database data.

BleepingComputerSep 24, 13:27 UTC · Sep 24, 2026Exploit / PoCExploitedCVE-2026-48842 CVE-2023-5631 CVE-2020-35730+48 · 2 reads

Poland's CERT Warns of Active Exploitation of Critical Zimbra Collaboration Suite Flaw

CERT Polska confirms active exploitation of critical unauthenticated RCE CVE-2026-73570 in Zimbra Collaboration Suite, patched July 20.

Security AffairsAug 21, 09:14 UTC · Aug 21, 2026Exploit / PoCExploitedCVE-2026-735701 · 1 read

Related CVEs

by mentions

CVE-2021-4402670%9.8
SQL Injection in Roundcube Webmail via Search Parameters
published Nov 19, 2021Roundcube WebmailKEV
CVE-2020-1264184%9.8
Command Injection RCE in Roundcube Webmail (CVE-2020-12641)
published May 4, 2020roundcube webmailKEVPoC
CVE-2026-7357077%8.9
Unauthenticated OS Command Injection RCE in Synacor Zimbra Collaboration Suite
published Aug 13, 2026Synacor Zimbra Collaboration Suite (ZCS)KEVPoC ×5
CVE-2025-49113100%8.8
Authenticated PHP Object Deserialization RCE in Roundcube Webmail
published Jun 2, 2025Roundcube WebmailKEVPoC ×2
CVE-2020-3573033%6.1
Cross-Site Scripting in Roundcube Webmail Plain-Text Email Link Handling
published Dec 28, 2020Roundcube WebmailKEV
CVE-2025-6846127%6.1
Cross-Site Scripting via SVG animate Tag in Roundcube Webmail
published Dec 18, 2025Roundcube WebmailKEV
CVE-2023-563176%5.4
Stored XSS in Roundcube Webmail exploited in the wild (CVE-2023-5631)
published Oct 18, 2023Roundcube WebmailKEVPoC
CVE-2026-488422%8.1
Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1 has Pre-authentication SQL injection in the virtuser_query plugin via a preg_replace() backslash…
published May 25, 2026PoC ×3

Appears with

APT28threat actor · 2
Shadowserverorganization · 2
Zimbra Collaboration Suiteproduct · 1
APT29threat actor · 1
Synacorvendor · 1
Seqrite Labsorganization · 1
CISAorganization · 1
Canadian Centre for Cyber Securityorganization · 1
Roundcube Webmailproduct · 1
Zimbravendor · 1
CERT Polskaorganization · 1
Roundcubevendor · 1
cPanelproduct · 1

Entities are extracted by the model from each article. First seen Aug 21, 2026, last mentioned Sep 24, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.