Attackers Target Unpatched Roundcube Servers With CVE-2026-48842
2026-09-28T08:51:41Z•293bfcacfd059b4091bf4fffe8be8ac5018eb988414dd44a7b0e49b2e97a5534
CVE-2026-48842CVE-2026-58704CVE-2026-87902AI safetyChromeGoogle PixelIoT securityMFAMicrosoftRoundcubeWordPressactive exploitationdata exposureknown exploited vulnerabilitiespasskeyspatch managementphishingprivacyransomwaresession hijackingzero-day
What happened
TechRepublic security feed covering active exploitation of Roundcube, WordPress, and Google Pixel vulnerabilities; major Chrome security updates; Microsoft 365 phishing campaigns using passkey and MFA lures; exposed camera data; and broader privacy, AI safety, and platform security developments. The most urgent items involve actively exploited or KEV-listed vulnerabilities requiring immediate patching.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- techrepublic_security
- Record identifier
- 293bfcacfd059b4091bf4fffe8be8ac5018eb988414dd44a7b0e49b2e97a5534
- Enrichment time
- 2026-09-28T08:51:41Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.