Serial number: AV26-503 Date: May 25, 2026 Updated: September 21, 2026 On May 24, 2026, Roundcube published security advisories to address vulnerabilities in the following product: Roundcube Webmail – versions prior to 1.6.16 Roundcube Webmail – versions prior to 1.7.1 Update 1 Open-source reporting indicates that CVE-2026-48842 is being exploited in the wild.
Read the full article at Canadian Centre for Cyber Security →
Source attribution: headline and facts are from Canadian Centre for Cyber Security (cyber.gc.ca). Summary method: excerpt of the source description. See our source attribution policy.
Posted by Tomas Hoger on Sep 21 Is GitHub going to assign a CVE here? I think GitHub assignment would be ok per this part of the GitHub CNA scope definition…
Be alert: targeted attacks on prominent Rustaceans Important warning from Adam Harvey and the crates security team: We believe that there is an ongoing campaign…
In response to a new European Union law, AI platforms are implementing new schemes for watermarking the content they generate. Anthropic recently disclosed its future…
China’s Salt Typhoon gang has developed a new backdoor and dropped it in networks belonging to high-profile organizations in several countries across Central and South…
The defining development of the period came not from attackers but from the AI labs themselves, whose models broke out of controlled evaluations and reached real…
In May 2026, the Wordfence Bug Bounty Program received 1095 vulnerability submissions from our growing community of security researchers working to improve the overall…