CVE-2025-68461 1

CVE-2025-68461: Round Cube Webmail Cross-site Scripting Vulnerability

Known Exploited Vulnerabilities CISA KEV Catalog Feb 20, 2026

RoundCube Webmail contains a cross-site scripting vulnerability via the animate tag in an SVG document.

Vulnerabilities & Patching