CVE-2026-114725
Description
A flaw was found in Roundcube Webmail. The application fails to properly sanitize newline characters in specific email header fields, including References, In-Reply-To, Message-ID, and From parameters. A remote authenticated attacker can exploit this vulnerability to inject arbitrary headers into outgoing emails, potentially enabling email spoofing or unauthorized manipulation of message routing.
Statement
This vulnerability is rated as having a Moderate impact because exploitation requires valid user authentication to transmit outgoing mail through the web interface. Although attackers can manipulate message header parameters to falsify routing or sender details, the vulnerability cannot be leveraged for remote code execution or server compromise. Additionally, roundcubemail is not included in core Red Hat Enterprise Linux products and is only distributed through community channels such as EPEL.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
