Hackers now exploit a critical Roundcube flaw in code injection attacks

According to the Canadian Centre for Cyber Security, the high-severity Roundcube Webmail vulnerability CVE-2026-48842 is being actively exploited.