CISA Known Exploited Vulnerability
This vulnerability is actively exploited in the wild and listed in the CISA Known Exploited Vulnerabilities catalog.
Remediation Deadline: Jul 13, 2023
High
CISA KEVCVE-2021-44026
Roundcube—Roundcube Webmail
Roundcube Webmail is vulnerable to SQL injection via search or search_params.
Required Action
https://roundcube.net/news/2021/11/12/security-updates-1.4.12-and-1.3.17-released; https://nvd.nist.gov/vuln/detail/CVE-2021-44026
Vulnerability Overview
- Severity
- High
- CISA KEV
- Yes
- Ransomware
- Unknown
- Published
- Jun 22, 2023
- KEV Added
- Jun 22, 2023
- Due Date
- Jul 13, 2023
- Related Articles
- 0
Vendor
Roundcube
Roundcube Webmail