Roundcube security advisory (AV25-309) - Update 1

Introduction to Malware Binary Triage (IMBT) Course

Looking to level up your skills? Get 10% off using coupon code: MWNEWS10 for any flavor.

Enroll Now and Save 10%: Coupon Code MWNEWS10

Note: Affiliate link – your enrollment helps support this platform at no extra cost to you.

  <div>
<div>
        <div><p><strong>Serial number: </strong>AV25-309<br /><strong>Date: </strong>June 2, 2025<br /><strong>Updated: </strong>February 20, 2026</p>

On June 1, 2025, Roundcube published security advisories to address vulnerabilities in the following products:

  • Webmail – versions prior to 1.5.10
  • Webmail – versions prior to 1.6.11

Update 1

On February 20, 2026, Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2025-49113 to their Known Exploited Vulnerabilities (KEV) Database.

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

</div>

Article Link: Roundcube security advisory (AV25-309) - Update 1 - Canadian Centre for Cyber Security