CVE-2026-48842

CVE-2026-48842 SQL Injection Python #poc #github #cve-2026-48842 #sqlinjection

Author

4minx

Published

2026-09-27

Stars

0

Forks

0

Repository

4minx/CVE-2026-48842

Description

CVE-2026-48842 PoC — Roundcube virtuser_query pre-auth SQLi

View on GitHub More PoCs for CVE-2026-48842

CVE-CVE-2026-48842 Details

Severity

HIGH

CVSS Score

8.1

CWE

CWE-89

Description

Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1 has Pre-authentication SQL injection in the virtuser_query plugin via a preg_replace() backslash escape bypass....

View on NVD

Related PoCs for CVE-2026-48842

No other PoCs found for this CVE.