Orta CVSS 6.5
CVE-2026-62642: Webmail: güvenlik açığı
Açıklama (NVD)
In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, an infinite loop was discovered in the TNEF decoder, which may lead to denial of service upon opening an email with a TNEF attachment.
Özet bilgiler
- Ürün
- Roundcube Webmail
- CVSS v3.1
- 6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - EPSS
- %0,28 (yüzdelik 20)
- CWE
- CWE-835
- Yama
- Mevcut
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| roundcube-webmail | 1.6.0 | — | 1.6.17 |
| roundcube-webmail | 1.7.0 | — | 1.7.2 |