{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/80412?format=json","vulnerability_id":"VCID-dw7a-b9jk-c3dd","summary":"Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1 has insecure code evaluation logic in LDAP the autovalues option that could lead to code injection. (Support for code evaluation has been removed in 1.6.16 and 1.7.1.)","aliases":[{"alias":"CVE-2026-48844"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/1077798?format=json","purl":"pkg:deb/debian/roundcube@1.6.5%2Bdfsg-1%2Bdeb12u8","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/roundcube@1.6.5%252Bdfsg-1%252Bdeb12u8"},{"url":"http://public2.vulnerablecode.io/api/packages/102269?format=json","purl":"pkg:deb/debian/roundcube@1.4.15%2Bdfsg.1-1%2Bdeb11u4?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-f6bd-3n2d-2fd3"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/roundcube@1.4.15%252Bdfsg.1-1%252Bdeb11u4%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/102340?format=json","purl":"pkg:deb/debian/roundcube@1.4.15%2Bdfsg.1-1%2Bdeb11u9?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/roundcube@1.4.15%252Bdfsg.1-1%252Bdeb11u9%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/102267?format=json","purl":"pkg:deb/debian/roundcube@1.6.5%2Bdfsg-1%2Bdeb12u8?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/roundcube@1.6.5%252Bdfsg-1%252Bdeb12u8%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/102339?format=json","purl":"pkg:deb/debian/roundcube@1.6.5%2Bdfsg-1%2Bdeb12u9?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/roundcube@1.6.5%252Bdfsg-1%252Bdeb12u9%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/102271?format=json","purl":"pkg:deb/debian/roundcube@1.6.15%2Bdfsg-0%2Bdeb13u1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/roundcube@1.6.15%252Bdfsg-0%252Bdeb13u1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/102341?format=json","purl":"pkg:deb/debian/roundcube@1.6.16%2Bdfsg-0%2Bdeb13u1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/roundcube@1.6.16%252Bdfsg-0%252Bdeb13u1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/102270?format=json","purl":"pkg:deb/debian/roundcube@1.6.16%2Bdfsg-1?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/roundcube@1.6.16%252Bdfsg-1%3Fdistro=trixie"}],"affected_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/1073035?format=json","purl":"pkg:deb/debian/roundcube@0.3.1-6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-18ja-r12w-rbbv"},{"vulnerability":"VCID-19y2-4mpz-nub1"},{"vulnerability":"VCID-1pan-qjdb-53hh"},{"vulnerability":"VCID-1ted-ner3-g3b5"},{"vulnerability":"VCID-2c8n-dwgj-d3dw"},{"vulnerability":"VCID-2n7k-86nn-fuc7"},{"vulnerability":"VCID-2pgb-uwem-h3ar"},{"vulnerability":"VCID-33t3-4xdt-mudz"},{"vulnerability":"VCID-38ng-5576-m7g9"},{"vulnerability":"VCID-3cfa-7wge-d7a8"},{"vulnerability":"VCID-3rdw-mq8j-fudf"},{"vulnerability":"VCID-43uk-86r9-pygh"},{"vulnerability":"VCID-4fc5-agqq-nfb6"},{"vulnerability":"VCID-4kfx-8xyq-h7dz"},{"vulnerability":"VCID-4ksc-m92c-6ubv"},{"vulnerability":"VCID-4nqw-h8se-27cy"},{"vulnerability":"VCID-5ase-acjx-kffw"},{"vulnerability":"VCID-5ggr-8vz5-p3hp"},{"vulnerability":"VCID-6c6c-ayns-3ufj"},{"vulnerability":"VCID-6fkd-c952-2ka2"},{"vulnerability":"VCID-6wgw-gq5a-zya9"},{"vulnerability":"VCID-7eu3-ex4x-fua3"},{"vulnerability":"VCID-86tm-143m-cyas"},{"vulnerability":"VCID-8s13-v3gv-efhj"},{"vulnerability":"VCID-abev-bbjb-cue6"},{"vulnerability":"VCID-ahv8-wew9-yqge"},{"vulnerability":"VCID-ampw-136d-9yf4"},{"vulnerability":"VCID-b34q-qxjz-4yd9"},{"vulnerability":"VCID-b4cw-uzf6-w7e3"},{"vulnerability":"VCID-bhkn-81xk-uugh"},{"vulnerability":"VCID-cftw-zeqb-5khs"},{"vulnerability":"VCID-chme-pkx3-xub5"},{"vulnerability":"VCID-dmhk-9asn-d3c8"},{"vulnerability":"VCID-dw7a-b9jk-c3dd"},{"vulnerability":"VCID-dzp6-798v-w7am"},{"vulnerability":"VCID-ermy-mkje-ayhb"},{"vulnerability":"VCID-ezd7-utbe-ryaa"},{"vulnerability":"VCID-ftjx-fm66-kfh4"},{"vulnerability":"VCID-gbu5-8a2e-mqdb"},{"vulnerability":"VCID-gd6a-p28z-8uea"},{"vulnerability":"VCID-gsuc-yx5b-dbaq"},{"vulnerability":"VCID-h5a4-hpws-h3fv"},{"vulnerability":"VCID-h7yh-bvtu-gqgp"},{"vulnerability":"VCID-haym-dk3e-aqbf"},{"vulnerability":"VCID-hydk-88d6-uqha"},{"vulnerability":"VCID-hyz1-qrsp-sbcv"},{"vulnerability":"VCID-jdkj-s9h7-hqfx"},{"vulnerability":"VCID-n7ej-e6sq-j3br"},{"vulnerability":"VCID-nfyj-9ucz-cyc7"},{"vulnerability":"VCID-njkh-85yd-f7fy"},{"vulnerability":"VCID-nnuu-kqha-uqeh"},{"vulnerability":"VCID-nzt1-tjt4-cygq"},{"vulnerability":"VCID-p4n3-6w9k-akde"},{"vulnerability":"VCID-p9rd-gezp-c7a2"},{"vulnerability":"VCID-par8-gwn6-xqgd"},{"vulnerability":"VCID-pdqp-9vg1-wyg9"},{"vulnerability":"VCID-pyed-syag-4kcg"},{"vulnerability":"VCID-qfbx-pq86-zufn"},{"vulnerability":"VCID-qxcm-qjew-d3cw"},{"vulnerability":"VCID-rn93-e1k8-cycs"},{"vulnerability":"VCID-ruju-dpny-pyc3"},{"vulnerability":"VCID-tz7t-shha-tqc5"},{"vulnerability":"VCID-u5fq-8zr1-xqhv"},{"vulnerability":"VCID-u7ez-zwpk-vqfw"},{"vulnerability":"VCID-ufvv-rm7c-s3b2"},{"vulnerability":"VCID-v114-c1as-bygj"},{"vulnerability":"VCID-vc6v-wx8t-1bey"},{"vulnerability":"VCID-vzmh-busj-hbf6"},{"vulnerability":"VCID-w8c6-neka-1fgw"},{"vulnerability":"VCID-xj3r-s4bq-73f1"},{"vulnerability":"VCID-y4aq-wjze-7kft"},{"vulnerability":"VCID-y9r2-67uj-cfd1"},{"vulnerability":"VCID-ypk7-n5fc-5ye9"},{"vulnerability":"VCID-zjx2-yaym-dqcz"},{"vulnerability":"VCID-zm6z-xana-6fa8"},{"vulnerability":"VCID-zp7v-cp58-a3e8"},{"vulnerability":"VCID-zq73-pyu4-h3g5"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/roundcube@0.3.1-6"},{"url":"http://public2.vulnerablecode.io/api/packages/1073036?format=json","purl":"pkg:deb/debian/roundcube@0.3.1-6%2Bdeb6u1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-18ja-r12w-rbbv"},{"vulnerability":"VCID-19y2-4mpz-nub1"},{"vulnerability":"VCID-1pan-qjdb-53hh"},{"vulnerability":"VCID-1ted-ner3-g3b5"},{"vulnerability":"VCID-2c8n-dwgj-d3dw"},{"vulnerability":"VCID-2n7k-86nn-fuc7"},{"vulnerability":"VCID-2pgb-uwem-h3ar"},{"vulnerability":"VCID-33t3-4xdt-mudz"},{"vulnerability":"VCID-38ng-5576-m7g9"},{"vulnerability":"VCID-3cfa-7wge-d7a8"},{"vulnerability":"VCID-3rdw-mq8j-fudf"},{"vulnerability":"VCID-43uk-86r9-pygh"},{"vulnerability":"VCID-4fc5-agqq-nfb6"},{"vulnerability":"VCID-4kfx-8xyq-h7dz"},{"vulnerability":"VCID-4ksc-m92c-6ubv"},{"vulnerability":"VCID-4nqw-h8se-27cy"},{"vulnerability":"VCID-5ase-acjx-kffw"},{"vulnerability":"VCID-5ggr-8vz5-p3hp"},{"vulnerability":"VCID-6c6c-ayns-3ufj"},{"vulnerability":"VCID-6fkd-c952-2ka2"},{"vulnerability":"VCID-6wgw-gq5a-zya9"},{"vulnerability":"VCID-7eu3-ex4x-fua3"},{"vulnerability":"VCID-86tm-143m-cyas"},{"vulnerability":"VCID-8s13-v3gv-efhj"},{"vulnerability":"VCID-abev-bbjb-cue6"},{"vulnerability":"VCID-ahv8-wew9-yqge"},{"vulnerability":"VCID-ampw-136d-9yf4"},{"vulnerability":"VCID-b34q-qxjz-4yd9"},{"vulnerability":"VCID-b4cw-uzf6-w7e3"},{"vulnerability":"VCID-bhkn-81xk-uugh"},{"vulnerability":"VCID-cftw-zeqb-5khs"},{"vulnerability":"VCID-chme-pkx3-xub5"},{"vulnerability":"VCID-dmhk-9asn-d3c8"},{"vulnerability":"VCID-dw7a-b9jk-c3dd"},{"vulnerability":"VCID-dzp6-798v-w7am"},{"vulnerability":"VCID-ermy-mkje-ayhb"},{"vulnerability":"VCID-ezd7-utbe-ryaa"},{"vulnerability":"VCID-ftjx-fm66-kfh4"},{"vulnerability":"VCID-gbu5-8a2e-mqdb"},{"vulnerability":"VCID-gd6a-p28z-8uea"},{"vulnerability":"VCID-gsuc-yx5b-dbaq"},{"vulnerability":"VCID-h5a4-hpws-h3fv"},{"vulnerability":"VCID-h7yh-bvtu-gqgp"},{"vulnerability":"VCID-haym-dk3e-aqbf"},{"vulnerability":"VCID-hydk-88d6-uqha"},{"vulnerability":"VCID-hyz1-qrsp-sbcv"},{"vulnerability":"VCID-jdkj-s9h7-hqfx"},{"vulnerability":"VCID-n7ej-e6sq-j3br"},{"vulnerability":"VCID-nfyj-9ucz-cyc7"},{"vulnerability":"VCID-njkh-85yd-f7fy"},{"vulnerability":"VCID-nnuu-kqha-uqeh"},{"vulnerability":"VCID-nzt1-tjt4-cygq"},{"vulnerability":"VCID-p4n3-6w9k-akde"},{"vulnerability":"VCID-p9rd-gezp-c7a2"},{"vulnerability":"VCID-par8-gwn6-xqgd"},{"vulnerability":"VCID-pdqp-9vg1-wyg9"},{"vulnerability":"VCID-pyed-syag-4kcg"},{"vulnerability":"VCID-qfbx-pq86-zufn"},{"vulnerability":"VCID-qxcm-qjew-d3cw"},{"vulnerability":"VCID-rn93-e1k8-cycs"},{"vulnerability":"VCID-ruju-dpny-pyc3"},{"vulnerability":"VCID-tz7t-shha-tqc5"},{"vulnerability":"VCID-u5fq-8zr1-xqhv"},{"vulnerability":"VCID-u7ez-zwpk-vqfw"},{"vulnerability":"VCID-ufvv-rm7c-s3b2"},{"vulnerability":"VCID-v114-c1as-bygj"},{"vulnerability":"VCID-vc6v-wx8t-1bey"},{"vulnerability":"VCID-vzmh-busj-hbf6"},{"vulnerability":"VCID-w8c6-neka-1fgw"},{"vulnerability":"VCID-xj3r-s4bq-73f1"},{"vulnerability":"VCID-y4aq-wjze-7kft"},{"vulnerability":"VCID-y9r2-67uj-cfd1"},{"vulnerability":"VCID-ypk7-n5fc-5ye9"},{"vulnerability":"VCID-zjx2-yaym-dqcz"},{"vulnerability":"VCID-zm6z-xana-6fa8"},{"vulnerability":"VCID-zp7v-cp58-a3e8"},{"vulnerability":"VCID-zq73-pyu4-h3g5"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/roundcube@0.3.1-6%252Bdeb6u1"},{"url":"http://public2.vulnerablecode.io/api/packages/1073037?format=json","purl":"pkg:deb/debian/roundcube@0.7.2-9%2Bdeb7u2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-18ja-r12w-rbbv"},{"vulnerability":"VCID-19y2-4mpz-nub1"},{"vulnerability":"VCID-1pan-qjdb-53hh"},{"vulnerability":"VCID-2c8n-dwgj-d3dw"},{"vulnerability":"VCID-2n7k-86nn-fuc7"},{"vulnerability":"VCID-2pgb-uwem-h3ar"},{"vulnerability":"VCID-33t3-4xdt-mudz"},{"vulnerability":"VCID-38ng-5576-m7g9"},{"vulnerability":"VCID-3cfa-7wge-d7a8"},{"vulnerability":"VCID-3rdw-mq8j-fudf"},{"vulnerability":"VCID-43uk-86r9-pygh"},{"vulnerability":"VCID-4fc5-agqq-nfb6"},{"vulnerability":"VCID-4kfx-8xyq-h7dz"},{"vulnerability":"VCID-4ksc-m92c-6ubv"},{"vulnerability":"VCID-4nqw-h8se-27cy"},{"vulnerability":"VCID-5ase-acjx-kffw"},{"vulnerability":"VCID-5ggr-8vz5-p3hp"},{"vulnerability":"VCID-6wgw-gq5a-zya9"},{"vulnerability":"VCID-7eu3-ex4x-fua3"},{"vulnerability":"VCID-86tm-143m-cyas"},{"vulnerability":"VCID-8s13-v3gv-efhj"},{"vulnerability":"VCID-abev-bbjb-cue6"},{"vulnerability":"VCID-ahv8-wew9-yqge"},{"vulnerability":"VCID-ampw-136d-9yf4"},{"vulnerability":"VCID-b34q-qxjz-4yd9"},{"vulnerability":"VCID-bhkn-81xk-uugh"},{"vulnerability":"VCID-cftw-zeqb-5khs"},{"vulnerability":"VCID-chme-pkx3-xub5"},{"vulnerability":"VCID-dmhk-9asn-d3c8"},{"vulnerability":"VCID-dw7a-b9jk-c3dd"},{"vulnerability":"VCID-dzp6-798v-w7am"},{"vulnerability":"VCID-ermy-mkje-ayhb"},{"vulnerability":"VCID-ezd7-utbe-ryaa"},{"vulnerability":"VCID-ftjx-fm66-kfh4"},{"vulnerability":"VCID-gbu5-8a2e-mqdb"},{"vulnerability":"VCID-gd6a-p28z-8uea"},{"vulnerability":"VCID-h5a4-hpws-h3fv"},{"vulnerability":"VCID-h7yh-bvtu-gqgp"},{"vulnerability":"VCID-haym-dk3e-aqbf"},{"vulnerability":"VCID-hydk-88d6-uqha"},{"vulnerability":"VCID-hyz1-qrsp-sbcv"},{"vulnerability":"VCID-jdkj-s9h7-hqfx"},{"vulnerability":"VCID-n7ej-e6sq-j3br"},{"vulnerability":"VCID-nfyj-9ucz-cyc7"},{"vulnerability":"VCID-njkh-85yd-f7fy"},{"vulnerability":"VCID-nnuu-kqha-uqeh"},{"vulnerability":"VCID-p4n3-6w9k-akde"},{"vulnerability":"VCID-p9rd-gezp-c7a2"},{"vulnerability":"VCID-par8-gwn6-xqgd"},{"vulnerability":"VCID-pdqp-9vg1-wyg9"},{"vulnerability":"VCID-pyed-syag-4kcg"},{"vulnerability":"VCID-qfbx-pq86-zufn"},{"vulnerability":"VCID-qxcm-qjew-d3cw"},{"vulnerability":"VCID-rn93-e1k8-cycs"},{"vulnerability":"VCID-tz7t-shha-tqc5"},{"vulnerability":"VCID-u5fq-8zr1-xqhv"},{"vulnerability":"VCID-u7ez-zwpk-vqfw"},{"vulnerability":"VCID-ufvv-rm7c-s3b2"},{"vulnerability":"VCID-v114-c1as-bygj"},{"vulnerability":"VCID-vc6v-wx8t-1bey"},{"vulnerability":"VCID-w8c6-neka-1fgw"},{"vulnerability":"VCID-xj3r-s4bq-73f1"},{"vulnerability":"VCID-y4aq-wjze-7kft"},{"vulnerability":"VCID-y9r2-67uj-cfd1"},{"vulnerability":"VCID-ypk7-n5fc-5ye9"},{"vulnerability":"VCID-zjx2-yaym-dqcz"},{"vulnerability":"VCID-zm6z-xana-6fa8"},{"vulnerability":"VCID-zp7v-cp58-a3e8"},{"vulnerability":"VCID-zq73-pyu4-h3g5"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/roundcube@0.7.2-9%252Bdeb7u2"},{"url":"http://public2.vulnerablecode.io/api/packages/1076996?format=json","purl":"pkg:deb/debian/roundcube@1.1.5%2Bdfsg.1-1~bpo8%2B5","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-18ja-r12w-rbbv"},{"vulnerability":"VCID-1pan-qjdb-53hh"},{"vulnerability":"VCID-2c8n-dwgj-d3dw"},{"vulnerability":"VCID-2pgb-uwem-h3ar"},{"vulnerability":"VCID-33t3-4xdt-mudz"},{"vulnerability":"VCID-3cfa-7wge-d7a8"},{"vulnerability":"VCID-3rdw-mq8j-fudf"},{"vulnerability":"VCID-43uk-86r9-pygh"},{"vulnerability":"VCID-4kfx-8xyq-h7dz"},{"vulnerability":"VCID-4ksc-m92c-6ubv"},{"vulnerability":"VCID-4nqw-h8se-27cy"},{"vulnerability":"VCID-5ase-acjx-kffw"},{"vulnerability":"VCID-5ggr-8vz5-p3hp"},{"vulnerability":"VCID-6wgw-gq5a-zya9"},{"vulnerability":"VCID-7eu3-ex4x-fua3"},{"vulnerability":"VCID-86tm-143m-cyas"},{"vulnerability":"VCID-8s13-v3gv-efhj"},{"vulnerability":"VCID-abev-bbjb-cue6"},{"vulnerability":"VCID-ahv8-wew9-yqge"},{"vulnerability":"VCID-ampw-136d-9yf4"},{"vulnerability":"VCID-b34q-qxjz-4yd9"},{"vulnerability":"VCID-bhkn-81xk-uugh"},{"vulnerability":"VCID-cftw-zeqb-5khs"},{"vulnerability":"VCID-chme-pkx3-xub5"},{"vulnerability":"VCID-dw7a-b9jk-c3dd"},{"vulnerability":"VCID-dzp6-798v-w7am"},{"vulnerability":"VCID-ermy-mkje-ayhb"},{"vulnerability":"VCID-ezd7-utbe-ryaa"},{"vulnerability":"VCID-gbu5-8a2e-mqdb"},{"vulnerability":"VCID-gd6a-p28z-8uea"},{"vulnerability":"VCID-h5a4-hpws-h3fv"},{"vulnerability":"VCID-h7yh-bvtu-gqgp"},{"vulnerability":"VCID-haym-dk3e-aqbf"},{"vulnerability":"VCID-hydk-88d6-uqha"},{"vulnerability":"VCID-hyz1-qrsp-sbcv"},{"vulnerability":"VCID-jdkj-s9h7-hqfx"},{"vulnerability":"VCID-nfyj-9ucz-cyc7"},{"vulnerability":"VCID-njkh-85yd-f7fy"},{"vulnerability":"VCID-nnuu-kqha-uqeh"},{"vulnerability":"VCID-p4n3-6w9k-akde"},{"vulnerability":"VCID-p9rd-gezp-c7a2"},{"vulnerability":"VCID-par8-gwn6-xqgd"},{"vulnerability":"VCID-pdqp-9vg1-wyg9"},{"vulnerability":"VCID-pyed-syag-4kcg"},{"vulnerability":"VCID-qxcm-qjew-d3cw"},{"vulnerability":"VCID-rn93-e1k8-cycs"},{"vulnerability":"VCID-tz7t-shha-tqc5"},{"vulnerability":"VCID-u5fq-8zr1-xqhv"},{"vulnerability":"VCID-u7ez-zwpk-vqfw"},{"vulnerability":"VCID-ufvv-rm7c-s3b2"},{"vulnerability":"VCID-vc6v-wx8t-1bey"},{"vulnerability":"VCID-y4aq-wjze-7kft"},{"vulnerability":"VCID-y9r2-67uj-cfd1"},{"vulnerability":"VCID-ypk7-n5fc-5ye9"},{"vulnerability":"VCID-zjx2-yaym-dqcz"},{"vulnerability":"VCID-zp7v-cp58-a3e8"},{"vulnerability":"VCID-zq73-pyu4-h3g5"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/roundcube@1.1.5%252Bdfsg.1-1~bpo8%252B5"},{"url":"http://public2.vulnerablecode.io/api/packages/1076997?format=json","purl":"pkg:deb/debian/roundcube@1.2.3%2Bdfsg.1-4%2Bdeb9u6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1pan-qjdb-53hh"},{"vulnerability":"VCID-2c8n-dwgj-d3dw"},{"vulnerability":"VCID-2pgb-uwem-h3ar"},{"vulnerability":"VCID-33t3-4xdt-mudz"},{"vulnerability":"VCID-3cfa-7wge-d7a8"},{"vulnerability":"VCID-43uk-86r9-pygh"},{"vulnerability":"VCID-4kfx-8xyq-h7dz"},{"vulnerability":"VCID-4ksc-m92c-6ubv"},{"vulnerability":"VCID-4nqw-h8se-27cy"},{"vulnerability":"VCID-5ase-acjx-kffw"},{"vulnerability":"VCID-5ggr-8vz5-p3hp"},{"vulnerability":"VCID-7eu3-ex4x-fua3"},{"vulnerability":"VCID-86tm-143m-cyas"},{"vulnerability":"VCID-8s13-v3gv-efhj"},{"vulnerability":"VCID-abev-bbjb-cue6"},{"vulnerability":"VCID-ahv8-wew9-yqge"},{"vulnerability":"VCID-ampw-136d-9yf4"},{"vulnerability":"VCID-cftw-zeqb-5khs"},{"vulnerability":"VCID-chme-pkx3-xub5"},{"vulnerability":"VCID-dw7a-b9jk-c3dd"},{"vulnerability":"VCID-dzp6-798v-w7am"},{"vulnerability":"VCID-ermy-mkje-ayhb"},{"vulnerability":"VCID-ezd7-utbe-ryaa"},{"vulnerability":"VCID-gbu5-8a2e-mqdb"},{"vulnerability":"VCID-gd6a-p28z-8uea"},{"vulnerability":"VCID-h5a4-hpws-h3fv"},{"vulnerability":"VCID-h7yh-bvtu-gqgp"},{"vulnerability":"VCID-haym-dk3e-aqbf"},{"vulnerability":"VCID-hydk-88d6-uqha"},{"vulnerability":"VCID-hyz1-qrsp-sbcv"},{"vulnerability":"VCID-jdkj-s9h7-hqfx"},{"vulnerability":"VCID-nfyj-9ucz-cyc7"},{"vulnerability":"VCID-njkh-85yd-f7fy"},{"vulnerability":"VCID-nnuu-kqha-uqeh"},{"vulnerability":"VCID-p4n3-6w9k-akde"},{"vulnerability":"VCID-p9rd-gezp-c7a2"},{"vulnerability":"VCID-par8-gwn6-xqgd"},{"vulnerability":"VCID-pdqp-9vg1-wyg9"},{"vulnerability":"VCID-pyed-syag-4kcg"},{"vulnerability":"VCID-qxcm-qjew-d3cw"},{"vulnerability":"VCID-rn93-e1k8-cycs"},{"vulnerability":"VCID-tz7t-shha-tqc5"},{"vulnerability":"VCID-u5fq-8zr1-xqhv"},{"vulnerability":"VCID-ufvv-rm7c-s3b2"},{"vulnerability":"VCID-y4aq-wjze-7kft"},{"vulnerability":"VCID-y9r2-67uj-cfd1"},{"vulnerability":"VCID-ypk7-n5fc-5ye9"},{"vulnerability":"VCID-zjx2-yaym-dqcz"},{"vulnerability":"VCID-zp7v-cp58-a3e8"},{"vulnerability":"VCID-zq73-pyu4-h3g5"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/roundcube@1.2.3%252Bdfsg.1-4%252Bdeb9u6"},{"url":"http://public2.vulnerablecode.io/api/packages/1078285?format=json","purl":"pkg:deb/debian/roundcube@1.3.17%2Bdfsg.1-1~deb10u2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1pan-qjdb-53hh"},{"vulnerability":"VCID-2pgb-uwem-h3ar"},{"vulnerability":"VCID-33t3-4xdt-mudz"},{"vulnerability":"VCID-43uk-86r9-pygh"},{"vulnerability":"VCID-4kfx-8xyq-h7dz"},{"vulnerability":"VCID-4ksc-m92c-6ubv"},{"vulnerability":"VCID-4nqw-h8se-27cy"},{"vulnerability":"VCID-5ggr-8vz5-p3hp"},{"vulnerability":"VCID-7eu3-ex4x-fua3"},{"vulnerability":"VCID-86tm-143m-cyas"},{"vulnerability":"VCID-8s13-v3gv-efhj"},{"vulnerability":"VCID-abev-bbjb-cue6"},{"vulnerability":"VCID-ahv8-wew9-yqge"},{"vulnerability":"VCID-ampw-136d-9yf4"},{"vulnerability":"VCID-cftw-zeqb-5khs"},{"vulnerability":"VCID-chme-pkx3-xub5"},{"vulnerability":"VCID-dw7a-b9jk-c3dd"},{"vulnerability":"VCID-dzp6-798v-w7am"},{"vulnerability":"VCID-ermy-mkje-ayhb"},{"vulnerability":"VCID-gbu5-8a2e-mqdb"},{"vulnerability":"VCID-gd6a-p28z-8uea"},{"vulnerability":"VCID-h5a4-hpws-h3fv"},{"vulnerability":"VCID-h7yh-bvtu-gqgp"},{"vulnerability":"VCID-haym-dk3e-aqbf"},{"vulnerability":"VCID-hydk-88d6-uqha"},{"vulnerability":"VCID-hyz1-qrsp-sbcv"},{"vulnerability":"VCID-jdkj-s9h7-hqfx"},{"vulnerability":"VCID-nfyj-9ucz-cyc7"},{"vulnerability":"VCID-njkh-85yd-f7fy"},{"vulnerability":"VCID-nnuu-kqha-uqeh"},{"vulnerability":"VCID-p4n3-6w9k-akde"},{"vulnerability":"VCID-par8-gwn6-xqgd"},{"vulnerability":"VCID-pdqp-9vg1-wyg9"},{"vulnerability":"VCID-pyed-syag-4kcg"},{"vulnerability":"VCID-qxcm-qjew-d3cw"},{"vulnerability":"VCID-rn93-e1k8-cycs"},{"vulnerability":"VCID-tz7t-shha-tqc5"},{"vulnerability":"VCID-u5fq-8zr1-xqhv"},{"vulnerability":"VCID-ufvv-rm7c-s3b2"},{"vulnerability":"VCID-y9r2-67uj-cfd1"},{"vulnerability":"VCID-ypk7-n5fc-5ye9"},{"vulnerability":"VCID-zjx2-yaym-dqcz"},{"vulnerability":"VCID-zp7v-cp58-a3e8"},{"vulnerability":"VCID-zq73-pyu4-h3g5"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/roundcube@1.3.17%252Bdfsg.1-1~deb10u2"},{"url":"http://public2.vulnerablecode.io/api/packages/1077797?format=json","purl":"pkg:deb/debian/roundcube@1.4.15%2Bdfsg.1-1%2Bdeb11u4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1pan-qjdb-53hh"},{"vulnerability":"VCID-33t3-4xdt-mudz"},{"vulnerability":"VCID-4kfx-8xyq-h7dz"},{"vulnerability":"VCID-4ksc-m92c-6ubv"},{"vulnerability":"VCID-4nqw-h8se-27cy"},{"vulnerability":"VCID-5ggr-8vz5-p3hp"},{"vulnerability":"VCID-7eu3-ex4x-fua3"},{"vulnerability":"VCID-ahv8-wew9-yqge"},{"vulnerability":"VCID-chme-pkx3-xub5"},{"vulnerability":"VCID-dw7a-b9jk-c3dd"},{"vulnerability":"VCID-ermy-mkje-ayhb"},{"vulnerability":"VCID-f6bd-3n2d-2fd3"},{"vulnerability":"VCID-h7yh-bvtu-gqgp"},{"vulnerability":"VCID-nfyj-9ucz-cyc7"},{"vulnerability":"VCID-njkh-85yd-f7fy"},{"vulnerability":"VCID-nnuu-kqha-uqeh"},{"vulnerability":"VCID-par8-gwn6-xqgd"},{"vulnerability":"VCID-pdqp-9vg1-wyg9"},{"vulnerability":"VCID-tz7t-shha-tqc5"},{"vulnerability":"VCID-ypk7-n5fc-5ye9"},{"vulnerability":"VCID-zjx2-yaym-dqcz"},{"vulnerability":"VCID-zq73-pyu4-h3g5"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/roundcube@1.4.15%252Bdfsg.1-1%252Bdeb11u4"}],"references":[{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2026-48844","reference_id":"","reference_type":"","scores":[{"value":"0.00051","scoring_system":"epss","scoring_elements":"0.16475","published_at":"2026-06-12T12:55:00Z"},{"value":"0.00051","scoring_system":"epss","scoring_elements":"0.16329","published_at":"2026-06-11T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2026-48844"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-48844","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-48844"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1137507","reference_id":"1137507","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1137507"},{"reference_url":"https://github.com/roundcube/roundcubemail/releases/tag/1.6.16","reference_id":"1.6.16","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-26T12:47:59Z/"}],"url":"https://github.com/roundcube/roundcubemail/releases/tag/1.6.16"},{"reference_url":"https://github.com/roundcube/roundcubemail/releases/tag/1.7.1","reference_id":"1.7.1","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-26T12:47:59Z/"}],"url":"https://github.com/roundcube/roundcubemail/releases/tag/1.7.1"},{"reference_url":"https://github.com/roundcube/roundcubemail/commit/6a777d7394b763ce9acfce86c1a521e14a02d862","reference_id":"6a777d7394b763ce9acfce86c1a521e14a02d862","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-26T12:47:59Z/"}],"url":"https://github.com/roundcube/roundcubemail/commit/6a777d7394b763ce9acfce86c1a521e14a02d862"},{"reference_url":"https://github.com/roundcube/roundcubemail/commit/ea1798a6fbf060abcc0ba73b2435036bf8016a5a","reference_id":"ea1798a6fbf060abcc0ba73b2435036bf8016a5a","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-26T12:47:59Z/"}],"url":"https://github.com/roundcube/roundcubemail/commit/ea1798a6fbf060abcc0ba73b2435036bf8016a5a"},{"reference_url":"https://roundcube.net/news/2026/05/24/security-updates-1.6.16-and-1.7.1","reference_id":"security-updates-1.6.16-and-1.7.1","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-26T12:47:59Z/"}],"url":"https://roundcube.net/news/2026/05/24/security-updates-1.6.16-and-1.7.1"}],"weaknesses":[{"cwe_id":670,"name":"Always-Incorrect Control Flow Implementation","description":"The code contains a control flow path that does not reflect the algorithm that the path is intended to implement, leading to incorrect behavior any time this path is navigated."}],"exploits":[],"severity_range_score":"7.5 - 7.5","exploitability":"0.5","weighted_severity":"6.8","risk_score":3.4,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-dw7a-b9jk-c3dd"}