CVE-2026-48842Vulnerability
Reported by 6 independent sources · first reported by CERT-FR · last reported
Last reported 20 days ago
What the reports say
8 reports, newest first · the exact sentence from each-
Security Affairs newsletter Round 598 by Pierluigi Paganini – INTERNATIONAL EDITION“Roundcube SQL injection CVE-2026-48842 is now being exploited in the wild”
-
Roundcube SQL injection CVE-2026-48842 is now being exploited in the wild“Roundcube SQL injection CVE-2026-48842 is now being exploited in the wild”
-
Bulletin d'actualité CERTFR-2026-ACT-041 (28 septembre 2026)“CVE-2026-48842”
-
Roundcube Pre-Auth SQL Injection Flaw Actively Exploited in the Wild“The vulnerability in question is CVE-2026-48842 (CVSS score: 8.1), a pre-authentication SQL injection in the virtuser_query plugin of Roundcube Webmail versions 1.6.x before 1.6.16 and 1.7.x before 1.7.1.”
-
Roundcube SQLi (CVE-2026-48842) Exploited“Roundcube SQLi (CVE-2026-48842) Exploited”
-
Risky Bulletin: Major vulnerability found in ancient TACACS+ networking protocol“This is CVE-2026-48842.”
-
Roundcube security advisory (AV26-503) – Update 1“Open-source reporting indicates that CVE-2026-48842 is being exploited in the wild.”
-
Multiples vulnérabilités dans Roundcube (26 mai 2026)“Référence CVE CVE-2026-48842”
Indicators reported together
named in the same reports- hxxps://roundcube[.]net/news/2026/05/24/security-updates-1.6.16-and-1.7.1in 2 reports
- roundcube[.]netin 2 reports
- hxxps://www.synology[.]com/en-global/security/advisory/Synology_SA_26_13in 1 report
- hxxps://www.solarwinds[.]com/trust-center/security-advisories/cve-2026-28326in 1 report
- www.solarwinds[.]comin 1 report
- hxxps://tomcat.apache[.]org/security-10.html#Fixed_in_Apache_Tomcat_10.1.60in 1 report
- hxxps://tomcat.apache[.]org/security-11.html#Fixed_in_Apache_Tomcat_11.0.26in 1 report
- hxxps://tomcat.apache[.]org/security-9.html#Fixed_in_Apache_Tomcat_9.0.122in 1 report
- hxxps://www.solarwinds[.]com/trust-center/security-advisories/cve-2026-28324in 1 report
Copy these 9 indicators · defanged
Also named with it: CVE-2025-49113, CVE-2026-87902, CVE-2025-68461, CVE-2026-91843, CVE-2026-13639, CVE-2026-13684, CVE-2026-76183, CVE-2026-86248, CVE-2026-86350, CVE-2026-91799, CVE-2026-28324
Thanks — we review every report.