Roundcube security advisory (AV26-657)

Serial number: AV26-657
Date: July 6, 2026

On July 5, 2026, Roundcube published security advisories to address vulnerabilities in the following product: 

• Roundcube Webmail – versions prior to 1.6.17
• Roundcube Webmail – versions prior to 1.7.2

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.

• Security updates 1.6.17 and 1.7.2 released
• Roundcube Webmail 1.6.17
• Roundcube Webmail 1.7.2
• Roundcube Open Source Webmail Software