CVE-2026-114716: Roundcube Webmail Mail Header Injection Vulnerability
A remote authenticated attacker can exploit a mail header injection vulnerability in Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5, allowing them to inject arbitrary MIME part headers into outgoing messages. This vulnerability has a CVSS score of 8.5, indicating high severity. Affected users should update to the latest version to mitigate this risk.