Hackers now exploit critical Roundcube flaw in code injection attacks

A high-severity Roundcube Webmail vulnerability patched in May is now being actively exploited in code injection attacks, according to the Canadian Centre for Cyber Security. The flaw allows attackers to inject malicious code, potentially compromising email accounts and data. Organizations using Roundcube are urged to apply the patch immediately to mitigate the risk.