Roundcube Webmail
Roundcube · current 1.7.2
The current version of Roundcube Webmail is 1.7.2 (as of 05/07/2026). patchletter checks the official source daily and emails you every new release.
Actively exploited vulnerabilities
The US cybersecurity agency CISA lists these vulnerabilities in its catalog of Known Exploited Vulnerabilities. Check your version and patch or mitigate promptly.
- CVE-2017-16651Roundcube Webmail File Disclosure Vulnerability
- CVE-2021-44026Roundcube Webmail SQL Injection Vulnerability
- CVE-2020-12641Roundcube Webmail Remote Code Execution Vulnerability
- CVE-2020-35730Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability
Source: CISA KEV. The CVE is matched to the product automatically — when in doubt, the linked NVD entry applies.
Version history & changelog · as detected by patchletter
| Version | Channel | Date | Notes |
|---|---|---|---|
| 1.7.2 | STABLE | 05/07/2026 | Release notes → |
Never miss a Roundcube Webmail update
We check the source daily and email you — instantly or as a digest. Free, one-click unsubscribe.
Watch Roundcube Webmail
