Roundcube security advisory (AV26-793)
Brief
Serial number: AV26-793 Date: August 10, 2026
On August 9, 2026, Roundcube is affected by vulnerabilities in the following product:
- Roundcube Webmail
- prior to 1.6.18
- prior to 1.7.3
The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.
- Security updates 1.6.18 and 1.7.3 released
- Roundcube Webmail 1.6.18
- Roundcube Webmail 1.7.3
- Roundcube Open Source Webmail Software
Roundcube security advisory (AV26-793) - Canadian Centre for Cyber Security