# Roundcube

Latest release: 1.7.5. Known vulnerabilities: 62. Actively exploited: 5. Vendor advisories: [https://roundcube.net/news](https://roundcube.net/news)

Check any version: https://fixedin.dev/roundcube/{version}.md (for example https://fixedin.dev/roundcube/1.7.5.md).

## Release lines

| Line | Latest | Status | Check |
|---|---|---|---|
| 1.7 | 1.7.5 | supported | https://fixedin.dev/roundcube/1.7.5.md |
| 1.6 | 1.6.20 | supported (LTS) | https://fixedin.dev/roundcube/1.6.20.md |
| 1.5 | 1.5.15 | end of life since 2026-05-10 | https://fixedin.dev/roundcube/1.5.15.md |
| 1.4 | 1.4.16 | end of life since 2023-12-10 | https://fixedin.dev/roundcube/1.4.16.md |
| 1.3 | 1.3.17 | end of life since 2022-07-28 | https://fixedin.dev/roundcube/1.3.17.md |
| 1.2 | 1.2.13 | end of life since 2021-10-18 | https://fixedin.dev/roundcube/1.2.13.md |
| 1.1 | 1.1.12 | end of life | https://fixedin.dev/roundcube/1.1.12.md |
| 1.0 | 1.0.12 | end of life | https://fixedin.dev/roundcube/1.0.12.md |

## Actively exploited

- [CVE-2025-49113](https://roundcube.net/news/2025/06/01/security-updates-1.6.11-and-1.5.10), added to CISA KEV 2026-02-20
- [CVE-2025-68461](https://roundcube.net/news/2025/12/13/security-updates-1.6.12-and-1.5.12), added to CISA KEV 2026-02-20
- [CVE-2024-37383](https://github.com/roundcube/roundcubemail/commit/43aaaa528646877789ec028d87924ba1accf5242), added to CISA KEV 2024-10-24
- [CVE-2020-13965](https://www.debian.org/security/2020/dsa-4700), added to CISA KEV 2024-06-26
- [CVE-2023-43770](https://github.com/roundcube/roundcubemail/commit/e92ec206a886461245e1672d8530cc93c618a49b), added to CISA KEV 2024-02-12

Data as of: 2026-10-24 18:07 UTC

---

FixedIn gives information, not guarantees. Always confirm with the vendor's advisory before you rely on a result. Source: https://fixedin.dev/roundcube · JSON: https://fixedin.dev/roundcube.json · MCP server: https://fixedin.dev/mcp · About these addresses: https://fixedin.dev/llms.txt