> Debian Roundcube Critical Account Takeover Denial of Service Fix DSA-6391-1
[DATE: 19/07/2026 18:34]
[LANGUAGE: EN]
Multiple vulnerabilities were discovered in roundcube, a skinnable AJAX based webmail solution for IMAP servers, which could result in account takeover, cross-site scripting, SSRF bypass, information disclosure or denial of service. For the stable distribution (trixie), these problems have been fixed in