Roundcube SQL injection CVE-2026-48842 is now being exploited in the wild

, putting unpatched webmail servers at risk of database compromise. A Roundcube Webmail vulnerability, tracked as CVE-2026-48842 (CVSS score of 8.1) and patched four months ago, is now being exploited in the wild. The Canadian Centre for Cyber Security added…

Preview courtesy of Security Affairs. The full article opens on their site.