CVE-2026-114730

{
  "etk_id": "ETK-2026-2384",
  "cve_id": "CVE-2026-114730",
  "display_id": "CVE-2026-114730",
  "ghsa_id": "GHSA-8f6h-w7cq-8q8h",
  "euvd_id": "EUVD-2026-107997",
  "status": "published",
  "anchor_state": "anchored",
  "title": "SSRF filter bypass in Roundcube Webmail",
  "summary": "Roundcube Webmail versions 1.6.14 through before 1.6.20 and 1.7.0 through before 1.7.5 have an SSRF filtering bypass. An attacker able to cause the application to request a URL may reach loopback, link-local, or cloud metadata services through addresses omitted from the blocklist.",
  "mitigation": "Upgrade the 1.6 release line to 1.6.20 or later, or the 1.7 release line to 1.7.5 or later. Restrict the application host's outbound access to internal and metadata networks as defense in depth.",
  "vendor": "Roundcube",
  "product": "Webmail",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        ">= 1.6.14, < 1.6.20",
        ">= 1.7.0, < 1.7.5"
      ],
      "ecosystem": null,
      "fixed_versions": [
        "1.6.20",
        "1.7.5"
      ],
      "package_name": "Webmail",
      "purl": null
    }
  ],
  "cwes": [
    918
  ],
  "cvss_score": 7.2,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
  "epss_score": null,
  "epss_percentile": null,
  "epss_asof": null,
  "automation": "deterministic",
  "check": true,
  "check_confidence_basis": "differential",
  "exploit": false,
  "pipeline_minutes": 18.956844383333333,
  "t0_at": "2026-10-22T02:09:40.059000+00:00",
  "signals": {
    "check": {
      "at": "2026-10-22T03:20:39.931566+00:00",
      "days": 0.049304080625,
      "is_lower_bound": false,
      "measured_at": "2026-10-22T02:09:40.059000+00:00",
      "url": null
    },
    "trigger_signal": {
      "at": "2026-10-22T02:09:40.059000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-10-22T02:09:40.059000+00:00",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-114730"
    }
  }
}