Description

An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14. Unsanitized IMAP SEARCH command arguments could lead to IMAP injection or CSRF bypass during mail search.

Remediation

References

CVE-2026-35538

Related Vulnerabilities

SharePoint Use After Free Vulnerability (CVE-2026-45458)

WordPress Plugin Quiz Maker SQL Injection (6.5.8.3)

Joomla Other Vulnerability (CVE-2006-3481)

MySQL CVE-2018-3073 Vulnerability (CVE-2018-3073)

Atlassian Jira Other Vulnerability (CVE-2007-6618)

Severity

Low

Classification

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2026-35538