CyberRota
← Ana sayfaya dön

CVE-2026-54432

MEDIUM · CVSS 4.7

Kaynak: NVD + CISA KEV + EPSS · Yayınlanma: 2026-07-14T17:17:05.387 · Çekilme zamanı: 2026-07-14T18:29:52.553156+00:00

CyberRota Yorumu

Detaylı analiz gerekiyor.

CVE
CVE-2026-54432
Severity
MEDIUM
CVSS
4.7
EPSS
Yok

Orijinal NVD Açıklaması

Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2 allows Stored Cross-Site Scripting (XSS). The issue occurs because the attachment MIME type is not properly escaped on the attachment-validation warning page.