Tag: virtuser query plugin

Hackers Exploit Roundcube Flaw in Code Injection Attacks

Over 523,000 Roundcube webmail instances are vulnerable to a high-severity flaw, CVE-2026-48842, that's being exploited by hackers to inject malicious code and steal sensitive data. This pre-authenticated SQL injection vulnerability allows attackers to bypass authentication and wreak havoc on your database.