Security authorities have issued warnings regarding an actively exploited pre-authentication SQL injection vulnerability affecting the virtuser_query plugin in Roundcube Webmail (CVE-2026-48842). Impacting versions 1.6.x and 1.7.x prior to patching, this critical flaw allows remote attackers to compromise vulnerable mail servers. Administrators must apply updates immediately.
READ THE ORIGINAL ARTICLE AT THEHACKERNEWS.COM →