Search: “Roundcube”

108 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Exploit / PoC 27 Threat actor 26 Vulnerability 25 Ransomware 12 Malware 8 Phishing & fraud 5 Data breach 3 Advisory 2

SeverityAll critical 77 high 16 medium 15 low 0 info 0

Unknown threat actors exploit Roundcube Webmail flaw in phishing campaign

Security AffairsOct 21, 06:28 UTC · Oct 21, 2024Threat actor CVE-2024-37383

50

Roundcube RCE: Dark web activity signals imminent attacks (CVE-2025-49113)

Help Net SecurityFeb 23, 10:54 UTC · Feb 23, 2026Vulnerability in the wildCVE-2025-49113 CVE-2024-42009 CVE-2025-68461

60

Over 80,000 servers hit as roundcube RCE bug gets rapidly exploited

Security AffairsJun 11, 11:43 UTC · Jun 11, 2025Vulnerability CVE-2025-49113

60

Roundcube flaws allow easy email account compromise (CVE-2024-42009, CVE-2024-42008)

Help Net SecurityJun 10, 06:52 UTC · Jun 10, 2025Vulnerability in the wildCVE-2024-42009 CVE-2024-42008 CVE-2024-42010+4 CVEs

60

U.S. CISA adds Cisco ASA and FTD, and RoundCube Webmail bugs to its Known Exploited Vulnerabilities catalog

Security AffairsOct 25, 07:40 UTC · Oct 25, 2024Exploit / PoC in the wildCVE-2024-20481 CVE-2024-37383

60

Suspected China-Aligned Hackers Exploit Roundcube Flaws Against Universities

The Hacker NewsJul 8, 05:07 UTC · Jul 8, 2026Vulnerability CVE-2024-42009 CVE-2025-49113

60

U.S. CISA adds RoundCube Webmail flaws to its Known Exploited Vulnerabilities catalog

Security AffairsFeb 21, 11:19 UTC · Feb 21, 2026Exploit / PoC in the wildCVE-2025-49113 CVE-2025-68461

60

Winter Vivern APT exploited zero-day in Roundcube webmail software in recent attacks

Security AffairsOct 26, 05:20 UTC · Oct 26, 2023Exploit / PoC CVE-2020-35730 CVE-2022-27926 CVE-2023-5631

60

Winter Vivern: Zero-Day XSS Exploit Targets Roundcube Servers

Infosecurity MagazineOct 25, 17:00 UTC · Oct 25, 2023Exploit / PoC CVE-2020-35730 CVE-2023-5631

60

Roundcube Webmail under fire: critical exploit found after a decade

Security AffairsJun 4, 11:35 UTC · Jun 4, 2025Exploit / PoC CVE-2025-49113

60

Critical XSS bug in Roundcube Webmail allows attackers to steal emails and sensitive data

Security AffairsAug 7, 21:10 UTC · Aug 7, 2024Vulnerability CVE-2024-42009 CVE-2024-42008 CVE-2024-42010

60

Roundcube webmail XSS vulnerability exploited by attackers (CVE-2023-43770)

Help Net SecurityFeb 15, 11:46 UTC · Feb 15, 2024Vulnerability in the wildCVE-2023-43770 CVE-2020-35730 CVE-2021-44026

60

CISA adds Roundcube Webmail Persistent XSS bug to its Known Exploited Vulnerabilities catalog

Security AffairsFeb 12, 18:54 UTC · Feb 12, 2024Exploit / PoC in the wildCVE-2023-43770 CVE-2020-35730

60

Roundcube webmail zero-day exploited to spy on government entities (CVE-2023-5631)

Help Net SecurityOct 25, 00:00 UTC · Oct 25, 2023Exploit / PoC CVE-2023-5631 CVE-2020-35730 CVE-2022-27926

60

Critical 10-Year-Old Roundcube Webmail Bug Allows Authenticated Users Run Malicious Code

The Hacker NewsJun 9, 12:15 UTC · Jun 9, 2025Exploit / PoC in the wildCVE-2025-49113 CVE-2024-37383

60

Roundcube XSS flaw exploited to steal credentials, email (CVE-2024-37383)

Help Net SecurityOct 22, 00:00 UTC · Oct 22, 2024Vulnerability CVE-2024-37383

60

Russia-linked APT TAG-70 targets European government and military mail servers exploiting Roundcube XSS

Security AffairsFeb 19, 13:58 UTC · Feb 19, 2024Vulnerability

42

U.S. CISA adds RoundCube Webmail and Erlang Erlang/OTP SSH server flaws to its Known Exploited Vulnerabilities catalog

Security AffairsJun 10, 13:34 UTC · Jun 10, 2025Exploit / PoC in the wildCVE-2025-32433 CVE-2024-42009

60

Hackers Exploit Roundcube Webmail XSS Vulnerability to Steal Login Credentials

The Hacker NewsOct 21, 12:12 UTC · Oct 21, 2024Vulnerability CVE-2024-37383

35

APT28 hacked Roundcube email servers of Ukrainian entities

Security AffairsJun 21, 19:20 UTC · Jun 21, 2023Threat actor CVE-2020-35730 CVE-2020-12641 CVE-2021-44026+1 CVEs

60

CISA Adds Erlang SSH and Roundcube Flaws to Known Exploited Vulnerabilities Catalog

The Hacker NewsJun 12, 05:02 UTC · Jun 12, 2025Exploit / PoC in the wildCVE-2025-32433 CVE-2024-42009 CVE-2025-31022

60

Russia-Aligned TAG-70 Targets European Government and Military Mail Servers in New Espionage Campaign

Recorded FutureAug 22, 00:00 UTC · Aug 22, 2025Threat actor CVE-2023-23397

60

Espionage group uses webmail server zero

The RecordOct 25, 12:08 UTC · Oct 25, 2023Threat actor CVE-2023-5631 CVE-2020-35730

60

Roundcube Webmail Flaws Allow Hackers to Steal Emails and Passwords

The Hacker NewsAug 7, 13:29 UTC · Aug 7, 2024Vulnerability CVE-2024-42008 CVE-2024-42009 CVE-2024-42010+1 CVEs

60

CISA adds GeoSolutionsGroup JAI-EXT, Linux Kernel, and Roundcube Webmail bugs to its Known Exploited Vulnerabilities catalog

Security AffairsJun 27, 14:38 UTC · Jun 27, 2024Exploit / PoC in the wildCVE-2022-24816 CVE-2022-2586 CVE-2020-13965

60

Russian-Linked Hackers Target 80+ Organizations via Roundcube Flaws

The Hacker NewsFeb 20, 10:28 UTC · Feb 20, 2024Vulnerability

30

Alert: CISA Warns of Active 'Roundcube' Email Attacks

The Hacker NewsFeb 15, 00:00 UTC · Feb 15, 2024Advisory in the wildCVE-2023-43770

60

BlueDelta Exploits Ukrainian Government Roundcube Mail Servers to Support Espionage Activities

Recorded FutureAug 21, 00:00 UTC · Aug 21, 2025Threat actor CVE-2020-35730 CVE-2023-23397 CVE-2020-12641+1 CVEs

60

Suspected Chinese Threat Group Targets Universities

Infosecurity MagazineJul 7, 15:40 UTC · Jul 7, 2026Vulnerability CVE-2024-42009 CVE-2025-49113

47

CISA Adds Two Actively Exploited Roundcube Flaws to KEV Catalog

The Hacker NewsFeb 21, 07:21 UTC · Feb 21, 2026Exploit / PoC in the wildCVE-2025-49113 CVE-2025-68461

60

Russia-Linked APT28 Exploited MDaemon Zero

The Hacker NewsMay 15, 00:00 UTC · May 15, 2025Threat actor in the wildCVE-2020-12641 CVE-2020-35730 CVE-2021-44026+3 CVEs

60

Suspected Chinese espionage group used a Roundcube exploit chain to burrow into universities

CyberScoopJul 7, 09:00 UTC · Jul 7, 2026Threat actor CVE-2024-42009 CVE-2025-49113

60

APT28 Uses Signal Chat to Deploy BEARDSHELL Malware and COVENANT in Ukraine

The Hacker NewsSep 17, 18:18 UTC · Sep 17, 2025Malware CVE-2020-35730 CVE-2021-44026 CVE-2020-12641

47

Russia-aligned hackers target European and Iranian embassies in new espionage campaign

The RecordFeb 17, 01:36 UTC · Feb 17, 2024Threat actor in the wildCVE-2023-43770

60

⚡ Weekly Recap: Chrome 0-Days, Router Botnets, AWS Breach, Rogue AI Agents & More

The Hacker NewsMar 15, 00:00 UTC · Mar 15, 2026Malware in the wildCVE-2026-3909 CVE-2026-3910 CVE-2026-3913+40 CVEs2

60

Russian Espionage Operation Targets Organizations Tied to Ukraine War

Infosecurity MagazineMay 16, 11:15 UTC · May 16, 2025Threat actor CVE-2024-11182 CVE-2023-43770

60

Nation State Hackers Exploiting Zero

The Hacker NewsOct 26, 03:42 UTC · Oct 26, 2023Exploit / PoC CVE-2020-35730 CVE-2023-5631

60

Pro-Russia hackers target inboxes with 0

Ars Technica · SecurityOct 25, 22:21 UTC · Oct 25, 2023Exploit / PoC CVE-2023-5631

60

Fake Notepad++ Plugin Delivers MATCHBOIL.V2 in UAC

The Hacker NewsJul 24, 06:50 UTC · Jul 24, 2026Ransomware CVE-2025-66376 CVE-2026-8496 CVE-2025-49113

60

July 2026 CVE Landscape

Recorded FutureAug 7, 00:00 UTC · Aug 7, 2026Ransomware in the wildCVE-2025-3248 CVE-2008-4128 CVE-2017-17215+78 CVEs1

60