Roundcube CVE-2026-48842: 523,000 exposed servers, about ten of them vulnerable

The affected plugin is off by default. Check your config before you schedule an emergency window.

25 September 2026 · 6 min · PPD