---
title: "Roundcube: known exploited vulnerabilities"
url: https://erroneo.us/security/vendor/roundcube/
description: "Every Roundcube vulnerability in CISA's Known Exploited Vulnerabilities catalog since October 2023 (7), newest first, with due dates and fixes."
type: vendor
section: "Security Digest"
date_modified: 2026-02-20
publisher: erroneo.us
author: erroneo.us Security Desk
license: All rights reserved. Quote with attribution and a link.
---

# Roundcube: known exploited vulnerabilities

- 2026-02-20 [CVE-2025-68461](https://erroneo.us/security/cve/CVE-2025-68461/index.md) Roundcube Webmail: RoundCube Webmail Cross-site Scripting Vulnerability (due 2026-03-13; ransomware: Unknown)
- 2026-02-20 [CVE-2025-49113](https://erroneo.us/security/cve/CVE-2025-49113/index.md) Roundcube Webmail: RoundCube Webmail Deserialization of Untrusted Data Vulnerability (due 2026-03-13; ransomware: Unknown)
- 2025-06-09 [CVE-2024-42009](https://erroneo.us/security/cve/CVE-2024-42009/index.md) Roundcube Webmail: RoundCube Webmail Cross-Site Scripting Vulnerability (due 2025-06-30; ransomware: Unknown)
- 2024-10-24 [CVE-2024-37383](https://erroneo.us/security/cve/CVE-2024-37383/index.md) Roundcube Webmail: RoundCube Webmail Cross-Site Scripting (XSS) Vulnerability (due 2024-11-14; ransomware: Unknown)
- 2024-06-26 [CVE-2020-13965](https://erroneo.us/security/cve/CVE-2020-13965/index.md) Roundcube Webmail: Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability (due 2024-07-17; ransomware: Unknown)
- 2024-02-12 [CVE-2023-43770](https://erroneo.us/security/cve/CVE-2023-43770/index.md) Roundcube Webmail: Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability (due 2024-03-04; ransomware: Unknown)
- 2023-10-26 [CVE-2023-5631](https://erroneo.us/security/cve/CVE-2023-5631/index.md) Roundcube Webmail: Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability (due 2023-11-16; ransomware: Unknown)

---
Source page: https://erroneo.us/security/vendor/roundcube/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt