ctrlINT What the industry said about every indicator, with the quote

CVE-2025-68461Vulnerability

RoundCube Webmail Cross-site Scripting Vulnerability

Exploited in the wildCISA added it to its Known Exploited Vulnerabilities list on .

Reported by 2 independent sources · first reported by The Hacker News · last reported

Last reported 26 days ago

CISA KEVAdded 20 Feb 2026
Fix due 13 Mar 2026
Used by ransomware: not knownCISA KEV catalogue
EPSS26.8%
higher than 98% of CVEsFIRST EPSS, as of 23 Oct 2026

What the reports say

2 reports, newest first · the exact sentence from each

  1. “In February, CISA listed CVE-2025-49113 and CVE-2025-68461 as actively exploited Roundcube vulnerabilities.”

    Security AffairsNews
    Roundcube SQL injection CVE-2026-48842 is now being exploited in the wild

  2. “Way back in February 2026, two other vulnerabilities in the same product (CVE-2025-49113 and CVE-2025-68461) were tagged as actively exploited by the U.S.”

    The Hacker NewsNews
    Roundcube Pre-Auth SQL Injection Flaw Actively Exploited in the Wild

Indicators reported together

named in the same reports

Also named with it: CVE-2025-49113, CVE-2026-48842

Thanks — we review every report.

Report a wrong value
What is wrong with CVE-2025-68461 here?
No account needed. We do not store your IP address.