Patch now! Roundcube mail servers are being actively exploited

The Cybersecurity & Infrastructure Security Agency (CISA) has added a vulnerability in Roundcube Webmail to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. This means that Federal Civilian Executive Branch (FCEB) agencies need to remediate this vulnerability by March 4, 2024, in order to protect their devices against active threats. We urge other Roundcube Webmail users to take this seriously too.

Roundcube is a web-based IMAP email client. Internet Message Access Protocol (IMAP) is used for receiving …

actively exploited agency amp catalog cisa civilian cybersecurity devices executive exploitation exploited exploited vulnerabilities fceb federal federal civilian infrastructure infrastructure security known exploited known exploited vulnerabilities known exploited vulnerabilities catalog mail march order patch protect roundcube roundcube webmail security servers vulnerabilities vulnerability webmail