🚀 Acunetix is now Invicti Web + API. Read the announcement.
Get a demo Invicti Website Security Scanner Get a demo
  • Product
  • Why Invicti Web + API?
    • Solutions
      • INDUSTRIES
        • IT & Telecom
        • Government
        • Financial Services
        • Education
        • Healthcare
      • ROLES
        • CTO & CISO
        • Engineering Manager
        • Security Engineer
        • DevSecOps
    • Case Studies
    • Customers
    • Testimonials
  • Pricing
  • About Us
    • Our story
    • In the news
    • Careers
    • Contact
  • Resources
    • Blog
    • Webinars
    • White papers
    • Buyer’s guide
    • Partners
    • Documentation
  • Get a demo
WEB APPLICATION VULNERABILITIES Standard & Premium

Roundcube Loop with Unreachable Exit Condition ('Infinite Loop') Vulnerability (CVE-2026-62642)

Description

In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, an infinite loop was discovered in the TNEF decoder, which may lead to denial of service upon opening an email with a TNEF attachment.

Remediation

References

CVE-2026-62642

Related Vulnerabilities

MySQL CVE-2024-21125 Vulnerability (CVE-2024-21125)

MongoDb Incorrect Permission Assignment for Critical Resource Vulnerability (CVE-2021-20326)

WordPress Plugin Zita Elementor Site Library Arbitrary File Upload (1.6.1)

Apache Tomcat Permissions, Privileges, and Access Controls Vulnerability (CVE-2016-0762)

Nexus Repository Manager Improper Authentication Vulnerability (CVE-2019-9629)

Severity

Medium

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Tags

Missing Update Known Vulnerabilities CWE-835 CVE-2026-62642

Take action and discover your vulnerabilities

Get a demo
Client: AWS
Client: Cognizant
Client: Garmin
Client: Airforce
Client: NASA
Client: American Express
Product Information
  • AcuSensor Technology
  • AcuMonitor Technology
  • Invicti Web + API Integrations
  • Vulnerability Scanner
  • Support Plans
Use Cases
  • Agentic Pentesting
  • Website Security Scanner
  • External Vulnerability Scanner
  • Web Application Security
  • Vulnerability Management Software
Website Security
  • Cross-site Scripting
  • SQL Injection
  • Reflected XSS
  • CSRF Attacks
  • Directory Traversal
Learn More
  • White Papers
  • TLS Security
  • WordPress Security
  • Web Service Security
  • Prevent SQL Injection
Company
  • About Us
  • Customers
  • Become a Partner
  • Careers
  • Contact
Documentation
  • Case Studies
  • Documentation
  • Videos
  • Vulnerability Index
  • Webinars
  • Login
  • Invicti Subscription Services Agreement
  • Privacy Policy
  • Terms of Use
  • Sitemap
  • Follow us on X
  • Follow us on LinkedIn

© Invicti Web + API 2026