Canadian Centre for Cyber Security

Hackers now exploit critical Roundcube flaw in code injection attacks

A known high-severity vulnerability in Roundcube Webmail—patched in May—has shifted from theoretical risk to active exploitation in real-world code injection attacks, as confirmed by Canada’s national cybersecurity agency.