2 CVEs published in the last four months and 4 stories. Exploited flaws first.
| CVE | CVSS | Severity | Product | Summary | Published |
|---|---|---|---|---|---|
| CVE-2026-62643 | 7.2 | high | webmail | In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, insufficient Cascading Style Sheets (CSS) sanitization | 105d ago |
| CVE-2026-54433 | 7.2 | high | webmail | In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2, there is Stored Cross-Site Scripting (XSS) via a crafte | 105d ago |
A threat group identified as UNK_MassTraction, suspected of operating on behalf of China, has been observed exploiting vulnerabilities within the Roundcube webmail application. The primary targets of these attacks are research mail servers located at academic institutions in both the United States and Canada. The group's reported method involves the theft of user sessions to achieve…
A suspected China-aligned threat group, tracked by researchers as UNK_MassTraction, has been actively exploiting vulnerabilities in Roundcube webmail servers to gain access to academic institutions in the United States and Canada. The primary targets appear to be physics and engineering departments, with potential connections to national security interests.
A new cyberattack campaign has been detected, specifically targeting academic institutions in North America. The perpetrators of this campaign are suspected to be aligned with China and are leveraging security weaknesses in the Roundcube webmail system. The attacks appear to be concentrated on physics and engineering departments within these universities.
China-aligned attackers have targeted U.S. and Canadian universities, exploiting a chain of vulnerabilities in the Roundcube webmail client to gain unauthorized access to sensitive data and establish persistent footholds within academic networks. The campaign, observed by Proofpoint researchers since May, appears to be ongoing and has primarily focused on physics and engineering departments,…