https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-01T03:32:02.202620+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-74997 CVE-2026-74997 2026-10-01T03:32:02.207259+00:00

Affected: Roundcube Webmail

In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, the cmd_learn driver of the markasjunk plugin is subject to remote code execution via crafted placeholder replacement values. This issue only affects Roundcube instances using the markasjunk plugin with its cmd_learn driver.