VULNERABILITY INTELLIGENCE

CVE-2026-62642

CVSS score4.3 MEDIUM
EPSS probability0.52%
CISA KEVNot currently listed
Published2026-07-14
Last modified2026-10-24
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Description

In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, an infinite loop was discovered in the TNEF decoder, which may lead to denial of service upon opening an email with a TNEF attachment.

Weakness classification

  • cve@mitre.org: CWE-835

Primary references