Cybersecurity researchers have disclosed particulars of a crucial safety flaw within the Roundcube webmail software program that has gone unnoticed for a decade and might be exploited to take over vulnerable programs and execute arbitrary code.
The vulnerability, tracked as CVE-2025-49113, carries a CVSS rating of 9.9 out of 10.0. It has been described as a case of post-authenticated distant code execution by way of
Important 10-Yr-Previous Roundcube Webmail Bug Permits Authenticated Customers Run Malicious Code
