Skip to content
COOEY

EXPOSURES › CVE-2026-62644

CVE-2026-62644

MEDIUM
DETAIL
SourceNVD · cve Published2026-07-14 CVSS6.4 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2026-62644 ↗

▸ RECOMMENDED ACTION  Patch the affected products and confirm your instances are covered.

PLAYERS IMPLICATED
Roundcube · vendorWebmail · product
DESCRIPTION

In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, the password plugin of the Roundcube Webmail was subject to username spoofing via session data, which could lead to account takeover.

AFFECTED FEDRAMP PRODUCTS · 0
No correlated FedRAMP products.