CVE-2026-74998 - Roundcube Webmail CSS Proxy Cross-Site Scripting and Information Disclosure
Brief
CVE ID : CVE-2026-74998
Published : Aug. 17, 2026, 12:40 p. m.
- 27 minutes ago
Description : In Roundcube Webmail before 1.
- 18 and 1.
- x before 1.
- 3, responses from the CSS (Cascading Style Sheets) proxy were not validated, which may result in information disclosure or XSS (cross-site scripting) via MIME sniffing.
Severity: 7.2
- HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...