CVE-2026-25916 Blast Radius

MEDIUM • CVSS 4.3Roundcube Webmail before 1.5.13 and 1.6 before 1.6.13, when "Block remote images" is used, does not block SVG feImage.

Is Your Infrastructure Using These Packages?

EchelonGraph automatically scans your cloud infrastructure and SBOMs to map your exposure to vulnerabilities like CVE-2026-25916.

Start Free Scan →← Back to CVE-2026-25916