Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

CVE Database V5

GCVE Database

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

roundcubemail

Multiple security vulnerabilities have been addressed in Roundcube Webmail stable version 1.6 through updates 1.6.11, 1.6.12, and 1.6.13. These include fixes for a post-authentication remote code execution via PHP object deserialization, cross-site scripting via SVG animate tags, information disclosure through the HTML style sanitizer, CSS injection, and remote image blocking bypass via SVG content. The vendor recommends updating all productive installations of Roundcube 1.6.x to version 1.6.13. Users should back up data before updating.

Roundcube Webmail stable version 1.6 received a series of security updates culminating in version 1.6.13. The updates fix several vulnerabilities: CVE-2025-68460 addresses an information disclosure vulnerability in the HTML style sanitizer; CVE-2025-68461 fixes a cross-site scripting vulnerability via SVG's animate tag; CVE-2026-25916 resolves a remote image blocking bypass via SVG content; CVE-2026-26079 mitigates a CSS injection vulnerability; and a post-authentication remote code execution via PHP object deserialization was fixed in version 1.6.11. These vulnerabilities were reported by various security researchers and CERT Polska. The updates also include various bug fixes and improvements unrelated to security.

Detailed information about Security update for roundcubemail affecting SUSE Product Security Team SUSE. Get real-time updates, technical details, and mitigation

Security update for roundcubemail - Live Threat Intelligence - Threat Radar | OffSeq.com

SUSE ratings

URL of this CSAF notice

SUSE Bug 1255306

SUSE Bug 1255308

SUSE Bug 1257909

SUSE Bug 1258052

SUSE CVE CVE-2025-68460 page

SUSE CVE CVE-2025-68461 page

SUSE CVE CVE-2026-25916 page

SUSE CVE CVE-2026-26079 page

Security update for roundcubemail

Roundcube Webmail before 1.5.12 and 1.6 before 1.6.12 is prone to a Cross-Site-Scripting (XSS) vulnerability via the animate tag in an SVG document.

CVE-2025-68461 is a Cross-Site Scripting (XSS) vulnerability classified under CWE-79 that affects Roundcube Webmail versions prior to 1.5.12 and 1.6 before 1.6.12. The vulnerability stems from improper neutralization of user-supplied input during the generation of web pages, specifically through the animate tag within SVG documents. SVG (Scalable Vector Graphics) elements can embed scripts or trigger script execution if not properly sanitized. In this case, malicious actors can craft SVG content containing a malicious animate tag that, when rendered by the vulnerable Roundcube Webmail interface, executes arbitrary JavaScript code in the context of the victim’s browser session. The CVSS v3.1 score of 7.2 reflects a high severity, with an attack vector of network (remote exploitation), low attack complexity, no privileges required, and no user interaction needed. The scope is changed, indicating that the vulnerability affects components beyond the initially vulnerable module, potentially impacting other parts of the system or user data. The impact includes partial confidentiality and integrity loss but no direct availability impact. Although no known exploits have been reported in the wild, the vulnerability’s nature and ease of exploitation make it a critical concern for administrators. Roundcube is a widely deployed open-source webmail client used by many organizations and hosting providers worldwide, making this vulnerability a significant threat to email confidentiality and integrity. The lack of available patches at the time of publication necessitates immediate attention to mitigation strategies and monitoring for forthcoming updates.

Detailed information about CVE-2025-68461: CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') in Roundcube Webma

CVE-2025-68461: CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') in Roundcube Webmail - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-68461: CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') in Roundcube Webmail


Security update for roundcubemailCVE-2025-68460 0 Multiple security vulnerabilities have been addressed in Roundcube Webmail stable version 1.6 through updates 1.6.11, 1.6.12, and 1.6.13. These include fixes for a post-authentication remote code execution via PHP object deserialization, cross-site scripting via SVG animate tags, information disclosure through the HTML style sanitizer, CSS injection, and remote image blocking bypass via SVG content. The vendor recommends updating all productive installations of Roundcube 1.6.x to version 1.6.13. Users should back up data before updating. HighVulnerability#gcve #csaf #cve-2025-68460 Join the discussion	GCVE Database	03/05/2026, 18:31:03 UTC Added: 09/17/2026, 01:59:48 UTC
CVE-2025-68461: CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') in Roundcube WebmailCVE-2025-68461 0 Roundcube Webmail before 1.5.12 and 1.6 before 1.6.12 is prone to a Cross-Site-Scripting (XSS) vulnerability via the animate tag in an SVG document. HighVulnerabilityUnited StatesGermanyFrance+11#cve #cve-2025-68461 #cwe-79 Join the discussion	CVE Database V5	12/18/2025, 05:00:54 UTC Added: 12/18/2025, 05:15:24 UTC

Threats Tagged 'cve-2025-68461'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-68461'

Lead Pen Test Professional