10-Year-Old Roundcube RCE Vulnerability Let Attackers Execute Malicious Code

A decade-old critical security vulnerability has been discovered in Roundcube Webmail that could allow authenticated attackers to execute arbitrary code on vulnerable systems, potentially affecting millions of installations worldwide. The flaw, tracked as CVE-2025-49113, carries an alarming CVSS score of 9.9 out of 10.0, marking it as one of the most severe vulnerabilities discovered in […]

The post 10-Year-Old Roundcube RCE Vulnerability Let Attackers Execute Malicious Code appeared first on Cyber Security News.