Search: “Roundcube”

77 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Exploit / PoC 27 Threat actor 26 Vulnerability 25 Ransomware 12 Malware 8 Phishing & fraud 5 Data breach 3 Advisory 2

SeverityAll critical 77 high 16 medium 15 low 0 info 0

Roundcube RCE: Dark web activity signals imminent attacks (CVE-2025-49113)

Help Net SecurityFeb 23, 10:54 UTC · Feb 23, 2026Vulnerability in the wildCVE-2025-49113 CVE-2024-42009 CVE-2025-68461

60

Over 80,000 servers hit as roundcube RCE bug gets rapidly exploited

Security AffairsJun 11, 11:43 UTC · Jun 11, 2025Vulnerability CVE-2025-49113

60

Roundcube flaws allow easy email account compromise (CVE-2024-42009, CVE-2024-42008)

Help Net SecurityJun 10, 06:52 UTC · Jun 10, 2025Vulnerability in the wildCVE-2024-42009 CVE-2024-42008 CVE-2024-42010+4 CVEs

60

U.S. CISA adds Cisco ASA and FTD, and RoundCube Webmail bugs to its Known Exploited Vulnerabilities catalog

Security AffairsOct 25, 07:40 UTC · Oct 25, 2024Exploit / PoC in the wildCVE-2024-20481 CVE-2024-37383

60

Suspected China-Aligned Hackers Exploit Roundcube Flaws Against Universities

The Hacker NewsJul 8, 05:07 UTC · Jul 8, 2026Vulnerability CVE-2024-42009 CVE-2025-49113

60

U.S. CISA adds RoundCube Webmail flaws to its Known Exploited Vulnerabilities catalog

Security AffairsFeb 21, 11:19 UTC · Feb 21, 2026Exploit / PoC in the wildCVE-2025-49113 CVE-2025-68461

60

Winter Vivern APT exploited zero-day in Roundcube webmail software in recent attacks

Security AffairsOct 26, 05:20 UTC · Oct 26, 2023Exploit / PoC CVE-2020-35730 CVE-2022-27926 CVE-2023-5631

60

Winter Vivern: Zero-Day XSS Exploit Targets Roundcube Servers

Infosecurity MagazineOct 25, 17:00 UTC · Oct 25, 2023Exploit / PoC CVE-2020-35730 CVE-2023-5631

60

Roundcube Webmail under fire: critical exploit found after a decade

Security AffairsJun 4, 11:35 UTC · Jun 4, 2025Exploit / PoC CVE-2025-49113

60

Critical XSS bug in Roundcube Webmail allows attackers to steal emails and sensitive data

Security AffairsAug 7, 21:10 UTC · Aug 7, 2024Vulnerability CVE-2024-42009 CVE-2024-42008 CVE-2024-42010

60

Roundcube webmail XSS vulnerability exploited by attackers (CVE-2023-43770)

Help Net SecurityFeb 15, 11:46 UTC · Feb 15, 2024Vulnerability in the wildCVE-2023-43770 CVE-2020-35730 CVE-2021-44026

60

CISA adds Roundcube Webmail Persistent XSS bug to its Known Exploited Vulnerabilities catalog

Security AffairsFeb 12, 18:54 UTC · Feb 12, 2024Exploit / PoC in the wildCVE-2023-43770 CVE-2020-35730

60

Roundcube webmail zero-day exploited to spy on government entities (CVE-2023-5631)

Help Net SecurityOct 25, 00:00 UTC · Oct 25, 2023Exploit / PoC CVE-2023-5631 CVE-2020-35730 CVE-2022-27926

60

Critical 10-Year-Old Roundcube Webmail Bug Allows Authenticated Users Run Malicious Code

The Hacker NewsJun 9, 12:15 UTC · Jun 9, 2025Exploit / PoC in the wildCVE-2025-49113 CVE-2024-37383

60

Roundcube XSS flaw exploited to steal credentials, email (CVE-2024-37383)

Help Net SecurityOct 22, 00:00 UTC · Oct 22, 2024Vulnerability CVE-2024-37383

60

U.S. CISA adds RoundCube Webmail and Erlang Erlang/OTP SSH server flaws to its Known Exploited Vulnerabilities catalog

Security AffairsJun 10, 13:34 UTC · Jun 10, 2025Exploit / PoC in the wildCVE-2025-32433 CVE-2024-42009

60

APT28 hacked Roundcube email servers of Ukrainian entities

Security AffairsJun 21, 19:20 UTC · Jun 21, 2023Threat actor CVE-2020-35730 CVE-2020-12641 CVE-2021-44026+1 CVEs

60

CISA Adds Erlang SSH and Roundcube Flaws to Known Exploited Vulnerabilities Catalog

The Hacker NewsJun 12, 05:02 UTC · Jun 12, 2025Exploit / PoC in the wildCVE-2025-32433 CVE-2024-42009 CVE-2025-31022

60

Russia-Aligned TAG-70 Targets European Government and Military Mail Servers in New Espionage Campaign

Recorded FutureAug 22, 00:00 UTC · Aug 22, 2025Threat actor CVE-2023-23397

60

Espionage group uses webmail server zero

The RecordOct 25, 12:08 UTC · Oct 25, 2023Threat actor CVE-2023-5631 CVE-2020-35730

60

Roundcube Webmail Flaws Allow Hackers to Steal Emails and Passwords

The Hacker NewsAug 7, 13:29 UTC · Aug 7, 2024Vulnerability CVE-2024-42008 CVE-2024-42009 CVE-2024-42010+1 CVEs

60

Alert: CISA Warns of Active 'Roundcube' Email Attacks

The Hacker NewsFeb 15, 00:00 UTC · Feb 15, 2024Advisory in the wildCVE-2023-43770

60

BlueDelta Exploits Ukrainian Government Roundcube Mail Servers to Support Espionage Activities

Recorded FutureAug 21, 00:00 UTC · Aug 21, 2025Threat actor CVE-2020-35730 CVE-2023-23397 CVE-2020-12641+1 CVEs

60

CISA Adds Two Actively Exploited Roundcube Flaws to KEV Catalog

The Hacker NewsFeb 21, 07:21 UTC · Feb 21, 2026Exploit / PoC in the wildCVE-2025-49113 CVE-2025-68461

60

Russia-Linked APT28 Exploited MDaemon Zero

The Hacker NewsMay 15, 00:00 UTC · May 15, 2025Threat actor in the wildCVE-2020-12641 CVE-2020-35730 CVE-2021-44026+3 CVEs

60

Suspected Chinese espionage group used a Roundcube exploit chain to burrow into universities

CyberScoopJul 7, 09:00 UTC · Jul 7, 2026Threat actor CVE-2024-42009 CVE-2025-49113

60

Russia-aligned hackers target European and Iranian embassies in new espionage campaign

The RecordFeb 17, 01:36 UTC · Feb 17, 2024Threat actor in the wildCVE-2023-43770

60

⚡ Weekly Recap: Chrome 0-Days, Router Botnets, AWS Breach, Rogue AI Agents & More

The Hacker NewsMar 15, 00:00 UTC · Mar 15, 2026Malware in the wildCVE-2026-3909 CVE-2026-3910 CVE-2026-3913+40 CVEs2

60

Russian Espionage Operation Targets Organizations Tied to Ukraine War

Infosecurity MagazineMay 16, 11:15 UTC · May 16, 2025Threat actor CVE-2024-11182 CVE-2023-43770

60

Nation State Hackers Exploiting Zero

The Hacker NewsOct 26, 03:42 UTC · Oct 26, 2023Exploit / PoC CVE-2020-35730 CVE-2023-5631

60

Pro-Russia hackers target inboxes with 0

Ars Technica · SecurityOct 25, 22:21 UTC · Oct 25, 2023Exploit / PoC CVE-2023-5631

60

Fake Notepad++ Plugin Delivers MATCHBOIL.V2 in UAC

The Hacker NewsJul 24, 06:50 UTC · Jul 24, 2026Ransomware CVE-2025-66376 CVE-2026-8496 CVE-2025-49113

60

July 2026 CVE Landscape

Recorded FutureAug 7, 00:00 UTC · Aug 7, 2026Ransomware in the wildCVE-2025-3248 CVE-2008-4128 CVE-2017-17215+78 CVEs1

60

Kremlin-linked hackers target webmail servers of Eastern European government agencies

The RecordMay 15, 14:13 UTC · May 15, 2025Exploit / PoC

60

Security Affairs newsletter Round 425 by Pierluigi Paganini

Security AffairsJun 25, 15:26 UTC · Jun 25, 2023Ransomware in the wildCVE-2023-20178 CVE-2023-20887 CVE-2023-27992+4 CVEs

60

From Phishing to Malware: AI Becomes Russia's New Cyber Weapon in War on Ukraine

The Hacker NewsOct 9, 09:10 UTC · Oct 9, 2025Malware CVE-2023-43770 CVE-2024-37383 CVE-2025-49113+2 CVEs

60

Week in review: Microsoft fixes exploited zero-day, Mirai botnets target unpatched Wazuh servers

Help Net SecurityJun 15, 00:00 UTC · Jun 15, 2025Exploit / PoC in the wildCVE-2025-33053 CVE-2025-24016 CVE-2025-43200+1 CVEs

60

Multi-national warning issued over Russia’s targeting of logistics, tech firms

CyberScoopMay 21, 18:41 UTC · May 21, 2025Exploit / PoC in the wildCVE-2023-23397 CVE-2023-38831

60

Spies hack high-value mail servers using an exploit from yesteryear

Ars Technica · SecurityMay 15, 00:00 UTC · May 15, 2025Exploit / PoC CVE-2023-43770

60

Week in review: Fortinet patches critical FortiManager 0-day, VMware fixes vCenter Server RCE

Help Net SecurityOct 27, 00:00 UTC · Oct 27, 2024Vulnerability CVE-2024-38812 CVE-2024-38813 CVE-2024-37383+3 CVEs

60