Vulnerabilities & PatchesEmerging1 src
CVE-2026-74998 - Roundcube Webmail CSS Proxy Cross-Site Scripting and Information Disclosure
CVE ID : CVE-2026-74998
Published : Aug. 17, 2026, 12:40 p. m.
• 27 minutes ago
Description : In Roundcube Webmail before 1. 6. 18 and 1. 7. x before 1. 7. 3, responses from the CSS (Cascading Style Sheets) proxy were not validated, which may result in information disclosure or XSS (cross-site scripting) via MIME sniffing.
Severity: 7.2
• HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...