-/10CrowdSec Score
RoundCube Webmail - RCE (CVE-2025-49113)
Published on09-06-2025
First seen on01-01-1970
CVSS 9.9/10RoundCube - WebMail
0Exploiting IPs reported
A PHP Object deserialization in RoundCube WebMail allows remote code execution. The vulnerability requires authentication.
Exploitation
Get real-time information about exploitation attempts and actors involved.
Common Weakness Enumeration (CWE)
Protection
Find out relevant information to protect your stack against this CVE.
Blocklist
With our advanced worldwide network detection, CrowdSec can provide a list of IPs known for exploiting the vulnerability.
To increase your protection against this CVE, block exploitation attempts with this list of identified actors.