Roundcube Webmail Vulnerability in Attackers’ Crosshairs
A high-severity SQL injection vulnerability (CVE-2026-48842) in the Roundcube webmail client’s virtuser_query plugin is being actively exploited by threat actors. Canadian authorities have confirmed active exploitation,…

