Find a vulnerability

{
  "containers": {
    "cna": {
      "affected": [
        {
          "product": "security update",
          "vendor": "Roundcube",
          "versions": [
            {
              "status": "affected",
              "version": "unknown"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Salvatore Bonaccorso"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "-----BEGIN PGP SIGNED MESSAGE-----\nHash: SHA512\n- -------------------------------------------------------------------------\nDebian Security Advisory DSA-6479-1                   security@debian.org\nhttps://www.debian.org/security/                     Salvatore Bonaccorso\nAugust 30, 2026                       https://www.debian.org/security/faq\n- -------------------------------------------------------------------------\nPackage        : roundcube\nCVE ID         : CVE-2026-74997 CVE-2026-74998 CVE-2026-74999 CVE-2026-75000\nCVE-2026-75002 CVE-2026-75003 CVE-2026-75004 CVE-2026-75006\nCVE-2026-75007 CVE-2026-75010\nDebian Bug     : 1144059\nMultiple vulnerabilities were discovered in roundcube, a skinnable AJAX\nbased webmail solution for IMAP servers, which could result in\ncross-site scripting, SSRF bypass, information disclosure, privilege\nescalation, denial of service or remote code execution.\nFor the stable distribution (trixie), these problems have been fixed in\nversion 1.6.18+dfsg-0+deb13u1.\nWe recommend that you upgrade your roundcube packages.\nFor the detailed security status of roundcube please refer to its\nsecurity tracker page at:\nhttps://security-tracker.debian.org/tracker/roundcube\nFurther information about Debian Security Advisories, how to apply\nthese updates to your system and frequently asked questions can be\nfound at: https://www.debian.org/security/\nMailing list: debian-security-announce@lists.debian.org\n-----BEGIN PGP SIGNATURE-----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\nV1nQkof2ImLmkJ3h7BVr68wg58jR3TG00s9K2uQaLI58YYGhd2w=\n=BIuq\n-----END PGP SIGNATURE-----"
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-11-02T09:47:22Z",
        "orgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
        "shortName": "VULNARCHIVE"
      },
      "references": [
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://vuln.freearchive.org/archive/item/14e7f318f2b4c579447aba068aacf0510b4b8e177cf9bba9418f5071995b4b37"
        },
        {
          "tags": [
            "technical-description"
          ],
          "url": "https://lists.securityfocus.com/hyperkitty/list/bugtraq@securityfocus.com/message/HNJEKF6WPXZFZTGVNHRUL6T5PFG3BWXD/"
        },
        {
          "url": "https://security-tracker.debian.org/tracker/roundcube"
        },
        {
          "url": "https://www.debian.org/security/"
        },
        {
          "url": "https://www.debian.org/security/faq"
        }
      ],
      "source": {
        "defect": [
          "E1x0kzy-0000000BgZV-06Q7%40seger.debian.org"
        ],
        "discovery": "EXTERNAL"
      },
      "title": "[Bugtraq] [SECURITY] [DSA 6479-1] roundcube security update",
      "x_gcve": [
        {
          "recordType": "reference",
          "relationships": [
            {
              "destId": "CVE-2026-74997",
              "type": "related"
            },
            {
              "destId": "CVE-2026-74998",
              "type": "related"
            },
            {
              "destId": "CVE-2026-74999",
              "type": "related"
            },
            {
              "destId": "CVE-2026-75000",
              "type": "related"
            },
            {
              "destId": "CVE-2026-75002",
              "type": "related"
            },
            {
              "destId": "CVE-2026-75003",
              "type": "related"
            },
            {
              "destId": "CVE-2026-75004",
              "type": "related"
            },
            {
              "destId": "CVE-2026-75006",
              "type": "related"
            },
            {
              "destId": "CVE-2026-75007",
              "type": "related"
            },
            {
              "destId": "CVE-2026-75010",
              "type": "related"
            }
          ],
          "vulnId": "GCVE-1988-2026-0527",
          "x_vulnarchive": {
            "archiveUrl": "https://vuln.freearchive.org/archive/item/14e7f318f2b4c579447aba068aacf0510b4b8e177cf9bba9418f5071995b4b37",
            "automated": true,
            "contentSha256": "14e7f318f2b4c579447aba068aacf0510b4b8e177cf9bba9418f5071995b4b37",
            "evidenceScore": 7,
            "messageId": "E1x0kzy-0000000BgZV-06Q7%40seger.debian.org",
            "originalUrl": "https://lists.securityfocus.com/hyperkitty/list/bugtraq@securityfocus.com/message/HNJEKF6WPXZFZTGVNHRUL6T5PFG3BWXD/",
            "policy": "vulnarchive-1",
            "sourceFormat": "text/html",
            "sourcePublishedAt": "2026-11-02T09:47:22Z"
          }
        },
        {
          "recordType": "advisory",
          "vulnId": "gcve-1988-2026-0527"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "4e2abfbf-4a2a-4b76-a4e0-d77c18ba156c",
    "assignerShortName": "VULNARCHIVE",
    "datePublished": "2026-11-02T09:47:22Z",
    "dateUpdated": "2026-11-02T09:47:22Z",
    "state": "PUBLISHED",
    "vulnId": "GCVE-1988-2026-0527"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}