Roundcube (English Wikipedia)

Gatlan, Sergiu (February 23, 2026). "CISA: Recently patched RoundCube flaws now exploited in attacks". BleepingComputer. Retrieved July 10, 2026. Roundcube vulnerabilities have been a popular target for cybercrime and state-sponsored threat groups, the most recent being a stored cross-site scripting (XSS) vulnerability (CVE-2023-5631) exploited by the Winter Vivern (TA473) Russian hacking group in zero-day attacks targeting European government entities and by the Russian APT28 cyber-espionage group to breach Ukrainian government email systems.
Gatlan, Sergiu (June 20, 2023). "Russian APT28 hackers breach Ukrainian govt email servers". BleepingComputer. Retrieved July 10, 2026. A threat group tracked as APT28 and linked to Russia's General Staff Main Intelligence Directorate (GRU) has breached Roundcube email servers belonging to multiple Ukrainian organizations, including government entities.
Toulas, Bill (June 17, 2025). "Hacker steals 1 million Cock.li user records in webmail data breach". BleepingComputer. Retrieved July 10, 2026.

cybersecuritynews.com (Global: low place; English: low place)

Abinaya (February 23, 2026). "CISA Warns of Multiple Roundcube Vulnerabilities Exploited in Attacks". Cyber Security News. Retrieved July 10, 2026.

Rudra, Sourav (December 1, 2023). "Open-Source Webmail Roundcube Joins Nextcloud". ItsFOSS.com. Retrieved December 2, 2023.

Korotaev, Mikhail (November 29, 2023). "Open source email pioneer Roundcube joins the Nextcloud family". Nextcloud Blog. Retrieved December 2, 2023.

"RoundCube-Next is Woefully Behind Schedule". Phoronix. Archived from the original on October 19, 2021. Retrieved October 19, 2021.
"In 2018, RoundCube Next Remains Dead In The Water". Phoronix. Archived from the original on October 19, 2021. Retrieved August 9, 2019.

"Dev_Members - Roundcube Webmail - Trac". Trac.roundcube.net. Archived from the original on October 2, 2011. Retrieved September 19, 2011.
"Changeset 5787 - Roundcube Webmail". Archived from the original on April 26, 2012.

"Dev_Members - Roundcube Webmail - Trac". Trac.roundcube.net. Archived from the original on October 2, 2011. Retrieved September 19, 2011.
"Changeset 5787 - Roundcube Webmail". Archived from the original on April 26, 2012.
"RoundCube-Next is Woefully Behind Schedule". Phoronix. Archived from the original on October 19, 2021. Retrieved October 19, 2021.
"In 2018, RoundCube Next Remains Dead In The Water". Phoronix. Archived from the original on October 19, 2021. Retrieved August 9, 2019.
"What about Roundcube Next? · Issue #6030 · roundcube/roundcubemail". GitHub. Archived from the original on October 19, 2021. Retrieved August 9, 2019.
"ESET Research: Winter Vivern attacks Roundcube webmail servers of governments in Europe through zero-day vulnerability". ESET. October 25, 2023. Archived from the original on October 28, 2023. Retrieved October 28, 2023.