https://infosecpwn.com/tags/sql-injection/ Recent content in Sql-Injection on infosecpwn https://infosecpwn.com/og-default.png https://infosecpwn.com/og-default.png Hugo en-us Fri, 25 Sep 2026 11:00:00 -0400 https://infosecpwn.com/posts/2026-09-25-roundcube-cve-2026-48842-exposure-is-not-vulnerability/ Fri, 25 Sep 2026 11:00:00 -0400 https://infosecpwn.com/posts/2026-09-25-roundcube-cve-2026-48842-exposure-is-not-vulnerability/ A four-month-old Roundcube patch is now reportedly being exploited. The headline number everyone is quoting counts internet-facing installs, not vulnerable ones — the affected plugin ships disabled and is inert without configuration. Here is the one grep that settles it for your estate.