Search: CVE-2026-48843

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.2	EPSS 0.3%	CVE-2026-48843Roundcube Webmail · Server-Side Request Forgery (SSRF) High7.2EPSS 0.3%2026-05-25CVE Database V5CVE-2026-48843 Roundcube Webmail versions 1.6.14 and 1.7.0 contain a Server-Side Request Forgery (SSRF) vulnerability due to insufficient sanitization of CSS in HTML email messages. This flaw may allow attackers to cause the server to make unintended requests, potentially disclosing information if stylesheet links point to internal network hosts. The vulnerability is a result of an incomplete fix for a previous issue (CVE-2026-35540). EPSS 0.3%Vulnerability CWE-918	CVE Database V5	2026-05-25

Page 1 of 1