Webmail

SmarterMail Auth Bypass via Password Reset to Pre-Auth RCE (CVE-2025-52691 / WT-2026-0001) new KEV RW EPSS 86%CVE-2025-52691webCRITICAL 10Patched2026-07-06Roundcube Webmail Post-Auth RCE via PHP Object Deserialization (CVE-2025-49113) new KEV EPSS 99%CVE-2025-49113webCRITICAL 9.9Patched2026-07-06Group-Office TNEF Attachment Handler OS Command Injection (CVE-2026-25512) new EPSS 19%CVE-2026-25512webCRITICAL 9.4Patched2026-07-05