VulnSocial

CVE-2026-26079Disclosure

LOWCVSS 4.7 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Roundcube Webmail before 1.5.13 and 1.6 before 1.6.13 allows Cascading Style Sheets (CSS) injection, e.g., because comments are mishandled.

Back to dashboard
0.5/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-829

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Patch or workaround signal is available
  • 3 mentions across 3 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 2 signals
  • Disclosure: 1 classified signal
  • General: 1 classified signal
  • Peaked 2d ago at 1 mentions (2026-02-11); latest day: 1
  • 3 total mentions across 3 days

Deep dive

Activity timeline3 mentions / 3d
00111Mentions · 2026-02-11: 1Mentions · 2026-02-23: 1Mentions · 2026-02-24: 1Patch / Workaround · 2026-02-23: 1Technical Details · 2026-02-11: 1Technical Details · 2026-02-23: 102-1102-2302-24
Signal classification3 categories
Disclosure
133.3%
Patch
133.3%
General
133.3%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-02-111
Disclosure1
2026-02-231
Patch1
2026-02-241
General1
Full discourse3 posts
  • Open Source Security mailing list@oss_security
    Patch

    CVE-2026-26079,CVE-2026-25916: Roundcube vulns https://www.openwall.com/lists/oss-security/2026/02/23/1 Roundcube PHP-based webmail frontend released security updates on Feb 8 * Fix CSS injection vulnerability reported by CERT Polska * Fix remote image blocking bypass via SVG content reported by nullcathedral

    Post summary

    Roundcube issued security updates on Feb 8 to address two CVEs, fixing a CSS injection flaw and an SVG-based image blocking bypass vulnerability.

    01041484
    4.4K followersView on X
  • CVETrends@CVEShield
    General

    Top 5 Trending CVEs: 1 - CVE-2026-25253 2 - CVE-2025-21042 3 - CVE-2026-22769 4 - CVE-2026-26079 5 - CVE-2026-1731 #cve #cvetrends #cveshield #cybersecurity https://www.cveshield.com/dashboard

    Post summary

    The post lists five trending CVE identifiers without providing any additional context, technical details, or actionable information.

    00020209
    1.7K followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-26079 Roundcube Webmail before 1.5.13 and 1.6 before 1.6.13 allows Cascading Style Sheets (CSS) injection, e.g., because comments are mishandled. https://www.cve.org/CVERecord?id=CVE-2026-26079

    Post summary

    The post outlines a CSS injection vulnerability in Roundcube Webmail (CVE-2026-26079) caused by mishandled comments, affecting versions prior to 1.5.13 and 1.6 before 1.6.13.

    00020615
    56.5K followersView on X

Explore more

Back to dashboard