{"cvss":0.0,"datePublished":"","dateUpdated":"","description":"Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1 has Pre-authentication SQL injection in the virtuser_query plugin via a preg_replace()... | Affected: Roundcube / Webmail | CVSS: 8.1 (HIGH) | EPSS: 0.00888 | Used in malware: unknown | Not yet in CISA KEV: True","dueDate":"","exploited":true,"id":"CVE-2026-48842","kev_catalogs":["circl"],"knownRansomwareCampaignUse":"","product":"Webmail","severity":"HIGH","source":"circl_kev","title":"CVE-2026-48842","vendor":""}