> TritonInfoSec News
Home / Sep 26, 2026 / Story
0
#3 The Hacker News general September 25, 2026 at 10:14 UTC

Roundcube Pre-Auth SQL Injection Flaw Actively Exploited in the Wild

By [email protected] (The Hacker News)

AI Summary

CVE-2026-48842 (CVSS 8.1), a pre-authentication SQL injection vulnerability in Roundcube Webmail's virtuser_query plugin, is being actively exploited in the wild according to the Canadian Centre for Cyber Security. The flaw affects versions 1.6.x before 1.6.16 and 1.7.x before 1.7.1, and stems from a preg_replace() backslash handling issue that requires no authentication to exploit. Organizations running Roundcube for email should patch immediately given active exploitation.

Read full article → https://thehackernews.com/2026/09/roundcube-pre-au…

Relevance score: 84.0/100

# More from September 26

  1. 1
    U.S. Soldier Gets 70 Months in Prison for AT&T, Verizon Extortions Krebs on Security
  2. 2
    Kiteworks urges 6-hour server shutdown over potential zero-day attacks BleepingComputer
  3. 4
    Hackers steal $351.6 million in Bitget crypto exchange hack BleepingComputer
  4. 5
    WSO2 and Adobe Commerce Flaws Exploited in Attacks, Added to CISA KEV The Hacker News
  5. 6
    ShinyHunters hacked Clop leak site using Grav CMS path traversal flaw BleepingComputer
  6. 7
    ‘SalesBleed’ Flaws in Salesforce Agentforce Enabled Zero-Click Data Exfiltration SecurityWeek
  7. 8
    Unpatched OnePlus Flaws Let Installed Android Apps Gain Root Without Permissions The Hacker News
  8. 9
    Phone-hacking company that won U.S. security agency contracts hid Russian ownership, DOJ alleges CyberScoop
  9. 10
    OpenAI agent breached Australian government health website, Albanese says The Record