CISA Adds Two Actively Exploited Roundcube Flaws to KEV Catalog

The Hacker NewsThe Hacker News
February 21, 2026 at 07:21 AM

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two security flaws impacting Roundcube webmail software to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The vulnerabilities in question are listed below -

CVE-2025-49113 (CVSS score: 9.9) - A deserialization of untrusted data vulnerability that allows remote code

Related Articles