Threats tagged 'ghsa-qc6m-xxcv-cwh2'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	6.8	CVE-2026-114732roundcubemail · Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an improper authentication Medium6.82026-10-22GCVE DatabaseCVE-2026-114732 Roundcube Webmail versions before 1.6.20 and 1.7.x before 1.7.5 have an improper authentication vulnerability affecting multi-host installations. The flaw allows a user logging in with an alias address to be authenticated as a different user on another IMAP host due to insufficient qualification of the alias lookup by IMAP host. This issue was fixed upstream by qualifying alias logins by IMAP host. Report on CVE-2026-114732 Vulnerability CWE-288 #ghsa-qc6m-xxcv-cwh2	GCVE Database	2026-10-22

Page 1 of 1