FortiMail flaw lets unauthenticated attackers access IBE webmail
Attackers can obtain any IBE recipient session and read or send that user's encrypted mail.
Stories per day · 30 days
2 RSS
Relateddreamhost4ftp4data-breach2fortimail2fortinet2hosting2password-reset2roundcube2authenticated1canada1command-injection1cwe-891file-manager1ibe1incorrect-authorization1psirt1sql-injection1ssrf1
16 stories, newest first · one card per story
Stories tagged #webmail
DreamHost confirms breach of File Manager exposing FTP credentials
Attackers exploited a flaw in DreamHost File Manager to steal FTP/SFTP usernames/passwords and some webmail credentials from fewer than 10% of accounts; passwords have been reset.
1
DreamHost data breach exposed FTP logins and webmail sessions
DreamHost confirmed attackers accessed File Manager from August to October 2026, stealing FTP/SFTP credentials and webmail sessions.
1
DreamHost forces password resets after File Manager and webmail incident
The hoster expired affected email and FTP/SFTP passwords but has not confirmed unauthorized access or data theft.
1
DreamHost forces email and FTP password resets after unexplained incident
DreamHost has not named a cause or confirmed theft; File Manager was back by October 26 while resets stayed required.
1
Roundcube Webmail before 1.6.20 and 1.7.5 has security flaws
Canadian advisory AV26-1075 names the fixed releases but gives no CVE identifiers or impact details.
Roundcube webmail fixes injection, XSS and SSRF flaws
Versions 1.6.20 and 1.7.5, released October 19, fix IMAP command injection via CRLF plus XSS and SSRF issues.
SQL command injection in webmail
Authenticated FortiMail webmail SQL injection can let attackers run commands, rated CVSS 7.7.
Roundcube SQL injection CVE-2026-48842 is now being exploited in the wild
Pre-authentication Roundcube SQL injection CVE-2026-48842 is now exploited against unpatched webmail servers.
4
Roundcube Pre-Auth SQL Injection Flaw Actively Exploited in the Wild
Roundcube pre-auth SQL injection CVE-2026-48842 is being exploited, Canadian cyber authorities warned.
2
Roundcube SQLi (CVE-2026-48842) Exploited
Pre-authentication Roundcube Webmail SQL injection CVE-2026-48842 is reportedly exploited months after patches.
Roundcube Webmail Vulnerability in Attackers’ Crosshairs
Attackers exploit unauthenticated SQL injection CVE-2026-48842 in Roundcube webmail's virtuser_query plugin; Canadian Cyber Centre confirms in-the-wild exploitation, 500,000+ servers exposed.
Hackers now exploit critical Roundcube flaw in code injection attacks
Attackers are exploiting patched Roundcube SQL injection CVE-2026-48842 to bypass login and steal database data.
8
Roundcube Webmail Flaw Lets Attackers Trigger SQL Injection Without Authentication
Unauthenticated SQL injection CVE-2026-48842 in Roundcube Webmail is being actively exploited on unpatched servers.
6
Roundcube Webmail SQL Injection Vulnerability Exploited in the Wild
Attackers are exploiting pre-authentication SQL injection CVE-2026-48842 in Roundcube Webmail before 1.6.16 and 1.7.1.
3
Roundcube security advisory (AV26-503) – Update 1
Canada's Cyber Centre says CVE-2026-48842 in Roundcube Webmail is exploited and urges patching.