CVE-2026-35545 in Webmail
요약 (영어)
An issue was discovered in Roundcube Webmail before 1.5.15 and 1.6.15. The remote image blocking feature can be bypassed via SVG content in an e-mail message. This may lead to information disclosure or access-control bypass. This involves the animate element with attributeName=fill/filter/stroke.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
책임이 있는
MITRE
예약하다
2026. 04. 03.
공개
2026. 04. 03.
상태
확인됨
엔트리
VulDB provides additional information and datapoints for this CVE:
| 아이디 | 취약성 | CWE | 악용 | 대책 | CVE |
|---|---|---|---|---|---|
| 355059 | Roundcube Webmail SVG Content | 669 | 정의되지 않음 | 공식 수정 | CVE-2026-35545 |