Roundcube Allocation of Resources Without Limits or Throttling Vulnerability - CVE-2026-62641
In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2 the TNEF decoder was subject to denial of service via a crafted compressed-RTF size.
In Roundcube Webmail before 1.6.17 and 1.7.x before 1.7.2 the TNEF decoder was subject to denial of service via a crafted compressed-RTF size.