CVE-2026-114725

🎯 CVE-2026-114725 🧪 PoC 🇪🇺 EUVD

💬 0 Diskussion 📄 .md Alle CVEs anzeigen ✕

CVE-2026-114725 | Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability. rcmail_sendmail stripped newline characters only from the Subject and Organization headers, leaving other header values taken from request parameters unsanitized, so a remote authenticated attacker could inject arbitrary headers into an outgoing message via the References, In-Reply-To, Message-ID and From parameters. Upstream fixed this in the commit

Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a mail header injection vulnerability. rcmail_sendmail stripped newline characters only from the Subject and Organization headers, leaving other header values taken from request parameters unsanitized, so a remote authenticated attacker could inject arbitrary headers into an outgoing message via the References, In-Reply-To, Message-ID and From parameters. Upstream fixed this in the commit “Fix mail header injection via References/In-Reply-To/Message-ID/From parameters”, which normalizes whitespace in every string header value.

Klassifikation & Betroffenheit:

CWE-99 Roundcube Webmail 1.7.0 <1.7.5Webmail 1.6.0 <1.6.20

Improper Control of Resource Identifiers ('Resource Injection') 🎯 High

The product receives input from an upstream component, but it does not restrict or incorrectly restricts the input before it is used as an identifier for a resource that may be outside the intended sphere of control.

🛡️ Empfohlene Mitigation: Assume all input is malicious. Use an "accept known good" input validation strategy, i.e., use a list of acceptable inputs that strictly conform to specifications. Reject any input that does not strictly conform to specifications, or transform it into something that does. When performing input validation, consider all …

Vollständige Definition bei MITRE ➔

⚔️ Typische Angriffsmuster (CAPEC):

CAPEC-10 · Buffer Overflow via Environment Variable… (High) CAPEC-75 · Manipulating Writeable Configuration Fil… (Very High) CAPEC-240 · Resource Injection (High)

🧩 Ähnliche Schwachstellen (Hersteller/Klasse/Score-Band):

CVE-2026-114722 6.5 CVE-2026-48846 6.5 CVE-2026-48845 6.5 CVE-2026-75010 6.4 CVE-2026-62644 6.4

🩹 Patch verfügbar (OSV):

🩹 acd32a86f631dd6dcda8ac3ec7bd9ba4d4c0c117 (Commit) 🩹 26d1b077f0c910a16c44c1862fe26e15f0bb3685 (Commit)

📚 Referenzen & Quellen:

🇪🇺 Original-Eintrag (ENISA EUVD) 🇺🇸 NVD-Eintrag

Ausnutzungs-Zeitleiste:

Reserviert 2026

Veröffentlicht 10/2026

Heute 22.10.

CVSS-Vektor-Analyse: 5.0

AV · Angriffsvektor Netzwerk

AC · Komplexität Gering

PR · Privilegien Gering

UI · Interaktion Keine

S · Scope Verändert

C · Vertraulichkeit Keine

I · Integrität Gering

A · Verfügbarkeit Keine

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N

CNA-Bewertung (mitre): 5.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N

Veröffentlicht:22.10.2026

Aktualisiert:22.10.2026 01:52

Assigner (CNA):mitre

EUVD-ID:EUVD-2026-107702

CWE-99 ✓ Offizieller Patch / Advisory verfügbar

💡 Gegenmaßnahme: Sicherheits-Update des Herstellers zeitnah einspielen und Netzwerksegmentierung prüfen.

Tier	CVEs	Anteil
≥90 %	725	0,2 %
≥50 %	3.224	0,9 %
≥10 %	22.086	5,9 %
<10 %	346.853	93,0 %

Tier

CVEs

Anteil

≥90 %

725

0,2 %

≥50 %

3.224

0,9 %

≥10 %

22.086

5,9 %

<10 %

346.853

93,0 %

Noch keine Analyse zu CVE-2026-114725

Beitrag zu CVE-2026-114725 verfassen

Zero-Day & Vulnerability Intelligence Hub