Threats Tagged 'cve-2026-114725'
View all threats tagged with 'cve-2026-114725'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-114725'
Click on any threat for detailed analysis and mitigation recommendations
0 Roundcube Webmail versions 1.6.0 up to but not including 1.6.20, and 1.7.0 up to but not including 1.7.5, contain a mail header injection vulnerability. This occurs because the function rcmail_sendmail only sanitized newline characters in the Subject and Organization headers, leaving other headers such as References, In-Reply-To, Message-ID, and From vulnerable to injection. A remote authenticated attacker could exploit this to inject arbitrary headers into outgoing emails. The issue was fixed by normalizing whitespace in all string header values in a later commit. Join the discussion | CVE Database V5 | 10/22/2026, 01:52:10 UTC Added: 10/22/2026, 02:03:44 UTC |
Showing 1 to 1 of 1 result