Roundcube security advisory (AV26-300) – Canadian Centre for Cyber Security

Serial number: AV26-300
Date: March 30, 2026

On March 29, 2026, Roundcube published security advisories to address vulnerabilities in the following product:

• Webmail – versions prior to 1.6.15
• Webmail – versions prior to 1.5.15
• Webmail – versions prior to 1.7 RC6

The Cyber Centre encourages users and administrators to review the provided web links and apply the necessary updates.