CISA Adds Two Actively Exploited Roundcube Flaws to KEV Catalog
- Posted on February 21, 2026
- By The Hacker News
- 5 Views
CISA Adds Two Actively Exploited Roundcube Flaws to KEV Catalog

CISA added two actively exploited Roundcube flaws to its KEV list, including a 9.9-rated RCE weaponized within 48 hours and an SVG-based XSS bug.