boxscore/security
PRODUCT · referenceProducts · latest edition

Reference page — cumulative record through Wednesday, August 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.

Webmail

Product reference — Webmail by Roundcube · sector: Other. Cumulative disclosure record for this product across the archive.

Follow Webmail — Atom feed

Product totals

Disclosures & known-exploited
All-timeYTD
CVEs3126
KEV entries72
Rate & severity
KEV/100Med CVSSMed EPSSCHML
22.66.5.003437131

KEV/100 = KEV entries ÷ CVEs × 100. Med CVSS / Med EPSS are medians over this product's disclosures. C/H/M/L = disclosures by CVSS severity band.

Monthly disclosures

Trend (by first-seen month, full archive): ▂▁▁▁▂▁▁▁▂▁▁▁▂▁▁▁▁▁▁▁▂▁▁▁▁▁▁▁▂▁▁▇▁▅█

Last 12 months (new CVEs by first-seen day)
MonthNew CVEs
2025-090
2025-100
2025-110
2025-120
2026-010
2026-022
2026-030
2026-040
2026-058
2026-060
2026-076
2026-0810

Notable CVEs

Ranked by the published formula: KEV → EPSS → CVSS → CVE ID.

Notable (ranked)
CVECVSSEPSS %ileSeverityKEVFirst seen
CVE-2025-49113—99.9—YES2026-02-20
CVE-2024-42009—99.6—YES2025-06-09
CVE-2020-13965—99.5—YES2024-06-26
CVE-2023-5631—99.5—YES2023-10-26
CVE-2024-37383—99.4—YES2024-10-24
CVE-2023-43770—99.0—YES2024-02-12
CVE-2025-68461—97.3—YES2026-02-20
CVE-2026-750027.168.7HIGH—2026-08-17
CVE-2026-749978.852.7HIGH—2026-08-17
CVE-2026-488428.152.6HIGH—2026-05-25
CVE-2026-488473.736.3LOW—2026-05-25
CVE-2026-488447.534.7HIGH—2026-05-25
CVE-2026-488466.533.9MEDIUM—2026-05-25
CVE-2026-488487.232.1HIGH—2026-05-25
CVE-2026-488456.531.0MEDIUM—2026-05-25

Recent CVEs

Most recently seen
CVECVSSEPSS %ileSeverityKEVFirst seen
CVE-2026-750075.416.4MEDIUM—2026-08-17
CVE-2026-750035.823.4MEDIUM—2026-08-17
CVE-2026-750027.168.7HIGH—2026-08-17
CVE-2026-750005.825.1MEDIUM—2026-08-17
CVE-2026-750106.420.4MEDIUM—2026-08-17
CVE-2026-750065.827.2MEDIUM—2026-08-17
CVE-2026-750044.321.1MEDIUM—2026-08-17
CVE-2026-749995.412.2MEDIUM—2026-08-17
CVE-2026-749978.852.7HIGH—2026-08-17
CVE-2026-749987.219.1HIGH—2026-08-17
CVE-2026-626449.817.8CRITICAL—2026-07-14
CVE-2026-6264310.016.2CRITICAL—2026-07-14
CVE-2026-626426.520.2MEDIUM—2026-07-14
CVE-2026-626416.516.9MEDIUM—2026-07-14
CVE-2026-5443310.024.0CRITICAL—2026-07-14

KEV entries

CISA Known Exploited Vulnerabilities (newest addition first)
CVEKEV addedCVSSEPSS %ileSeverity
CVE-2025-684612026-02-20—97.3—
CVE-2025-491132026-02-20—99.9—
CVE-2024-420092025-06-09—99.6—
CVE-2024-373832024-10-24—99.4—
CVE-2020-139652024-06-26—99.5—
CVE-2023-437702024-02-12—99.0—
CVE-2023-56312023-10-26—99.5—

Related

Vendor: Roundcube — all products and the full vendor record.

Methodology

A product is a (vendor, product) pair as named in the affected-product data. Rate statistics are arithmetic over published figures. Counts key to first-seen day. Raw counts are not comparable across products; this is a reference page assembled from the public record, not a ranking by our judgment.

Sources. CVE Program (cvelistV5), NVD (NIST), CISA KEV, FIRST EPSS.