Roundcube Security Update: 20 Flaws Fixed in 1.6.20 and 1.7.5 — Patch Tonight (2026)
The Roundcube security update released on 19 October 2026 ships versions 1.6.20 (LTS) and 1.7.5, fixing 20 security flaws in one release — including two IMAP command-injection bugs and four mail-header injections. Roundcube has assigned no CVE IDs and no severity scores to any of them yet, which means most vulnerability scanners will not flag … Read more