PT-2026-43115 · Unknown · Roundcube Webmail

Zazy · CVE-2026-48849 · Published 2026-05-24 · Updated 2026-06-29

Positive Technologies (AI Summary)

CVSS v3.1

4.4

Medium

Base vector

AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Roundcube Webmail versions 1.6.0 through 1.6.15 Roundcube Webmail versions 1.7.0 through 1.7.0

Description An unsanitized subject field in the draft restored value allows for stored Cross-Site Scripting (XSS), HTML, and CSS injection on shared mailboxes. This occurs when the application fails to properly clean the input in the subject field during the restoration of a draft.

Recommendations Update to version 1.6.16 for versions in the 1.6.x branch. Update to version 1.7.1 for versions in the 1.7.x branch.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

BDU:2026-07651

CVE-2026-48849

OPENSUSE-SU-2026:10869-1

OPENSUSE-SU-2026:20852-1

Affected Products

Roundcube Webmail

References · 32

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/48xxx/CVE-2026-48849.json · Exploit
• 🔥 https://github.com/AnandJogawade/CVE-2026-48849-Roundcube-Webmail-Stored-XSS · Exploit
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-48849 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-48849 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-48849 · Security Note
• https://ubuntu.com/security/CVE-2026-48849 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-48849 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-07651 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2026:10869-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-48849 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2026-48849 · Vendor Advisory
• https://github.com/roundcube/roundcubemail/releases/tag/1.6.16 · Note
• https://github.com/roundcube/roundcubemail/releases/tag/1.7.1 · Note
• https://github.com/roundcube/roundcubemail/commit/a21519187873ce962db029b6ff68e47bd7f3fd8a · Note
• https://github.com/roundcube/roundcubemail/commit/189d30a4890319cd687df959ca9f768a3a613d61 · Note