Back to today’s briefing

Story perspectives

Urgent: Roundcube Vulnerability Threatens 84,000 Users Worldwide

6/10/2025

39 9

Summary

Story summary

A serious vulnerability (CVE-2025-49113) in the Roundcube email client threatens around 84,000 unpatched installations worldwide, enabling remote code execution. Users are strongly advised to upgrade to the latest versions (1.5.10 and 1.6.11) without delay. Meanwhile, a spear phishing campaign is targeting Polish organizations, potentially exploiting this weakness for malicious attacks.

1 of 1

Story summary

A serious vulnerability (CVE-2025-49113) in the Roundcube email client threatens around 84,000 unpatched installations worldwide, enabling remote code execution. Users are strongly advised to upgrade to the latest versions (1.5.10 and 1.6.11) without delay. Meanwhile, a spear phishing campaign is targeting Polish organizations, potentially exploiting this weakness for malicious attacks.