PoC Code Escalates Roundcube Vuln Threat

A critical RCE vulnerability (CVE-2025-49113) in Roundcube webmail (affecting versions 1.1.0–1.6.10) has been disclosed and quickly weaponized with public proof-of-concept code; maintainers released patches (1.6.11 and 1.5.10) on June 1. ShadowServer reports roughly 85,000 likely unpatched instances worldwide, and threat actors — including the Belarus-linked UNC1151 conducting credential-theft campaigns — increase the risk that attackers will combine account compromise with this RCE to fully take over servers, so organizations should patch immediately and monitor file uploads and session activity.