The Roundcube security update fixes 12 webmail flaws, including a zero-click stored XSS and an SSRF bypass. Update to 1.6.19 or 1.7.4 now.

Related Posts:

• CVE-2026-86218 (CVSS 10): N-central Pre-Auth RCE Exploited in the Wild
• MikroTrick PoC: RouterOS Admin Rights Exploited In Wild
• AI Agent Coordination: The Unprecedented OpenAI Breakout

The post Roundcube Security Update Fixes 12 Webmail Flaws appeared first on Daily CyberSecurity.

A Confluence vulnerability, CVE-2026-21580, is a stored XSS flaw (CVSS 8.6) allowing unauthenticated attacks. A Jira flaw also patched. Update now.

Related Posts:

• CVE-2026-13737: Commvault Command Execution Flaws Expose Networks
• CVE-2026-18051 (CVSS 10): Unauthenticated Arbitrary File Write Hits 900k W3 Total Cache Sites
• BeyondTrust EPM Flaws Allow Windows Privilege Escalation

The post CVE-2026-21580: Stored XSS Hits Atlassian Confluence appeared first on Daily CyberSecurity.

Roundcube fixes a webmail RCE flaw and an SSRF filter bypass in versions 1.6.18 and 1.7.3. Update your mail server now.

Related Posts:

• CVE-2026-19188: Haiwell HMI Gateway Flaw Lets Attackers Execute Arbitrary OS Commands With Root Privileges (CVSS 10.0)
• Linux AF_PACKET Race (03390aa): PoC Exploit Enables Local Privilege Escalation
• Citrix NetScaler Pre-Auth RCE CVE-2026-8452 Gets Public Exploit Code

The post Roundcube Patches RCE and SSRF Flaws in 1.6.18 and 1.7.3 appeared first on Daily CyberSecurity.