Firetruck

CVE-2025-68461

KEV
Updated Oct 1, 2026 · PUBLISHED
View KEV entry →

Description

RoundCube Webmail contains a cross-site scripting vulnerability via the animate tag in an SVG document.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
WebmailRoundcube / Webmail>= 0, < 1.5.12affected
WebmailRoundcube / Webmail>= 1.6.0, < 1.6.12affected