ctrlINT What the industry said about every indicator, with the quote

CVE-2024-42009Vulnerability

RoundCube Webmail Cross-Site Scripting Vulnerability

Exploited in the wildCISA added it to its Known Exploited Vulnerabilities list on .

Reported by 3 independent sources · first reported by ESET WeLiveSecurity (ES) · last reported

Last reported 27 days ago

CISA KEVAdded 9 Jun 2025
Fix due 30 Jun 2025
Used by ransomware: not knownCISA KEV catalogue
EPSS82.9%
higher than 99% of CVEsFIRST EPSS, as of 22 Oct 2026

What the reports say

3 reports, newest first · the exact sentence from each

  1. “On July 9, security researchers reported that likely China-linked UNK_MassTraction had exploited CVE-2024-42009, a cross-site scripting vulnerability in Roundcube mail servers belonging to physics and engineering staff at US and Canadian universities.”

    CERT-EUGovernment
    Cyber Brief 26-08 - July 2026

  2. “CVE-2024-42009”

    Recorded FutureVendor
    July 2026 CVE Landscape

  3. “Además, el CERT-PL informó que el grupo explotó la vulnerabilidad XSS CVE-2024-42009 en Roundcube, la cual permite la ejecución de JavaScript al abrir mensajes de correo electrónico armados como armas cibernéticas, para exfiltrar las cred…”

    ESET WeLiveSecurity (ES)Vendor
    FrostyNeighbor intensifica ataques en Ucrania con validación selectiva de víctimas

Indicators reported together

named in the same reports
Copy this indicator · defanged

Also named with it: CVE-2026-15409, CVE-2026-15410, CVE-2026-25089, CVE-2026-39808, CVE-2025-49113, CVE-2026-33824, CVE-2025-5777, CVE-2026-48294, CVE-2026-42897, CVE-2025-55182, CVE-2018-0802, CVE-2023-38831, CVE-2026-50522, CVE-2026-58644, CVE-2025-3248, CVE-2008-4128, CVE-2017-17215, CVE-2021-4034, CVE-2021-27137

Thanks — we review every report.

Report a wrong value
What is wrong with CVE-2024-42009 here?
No account needed. We do not store your IP address.