VDB

GCVE-110-MAGEIA-2026-89

GCVE-110-MAGEIA-2026-89
Advisory Published
Vulnetix · Advisory published April 7, 2026
SVG Animate FUNCIRI Attribute Bypass — Remote Image Loading via fill/filter/stroke And some regressions from the last fix are fixed.
Download JSON Open in Console

Affected Products

VendorProductVersionsPlatforms
Mageiaroundcubemail0 (affected), 1.6.15-1.mga9 (unaffected)—

Aliases

CVE-2026-35545

References

Updated roundcubemail packages fix security vulnerability
advisory
Updated roundcubemail packages fix security vulnerability
issue
Updated roundcubemail packages fix security vulnerability
issue

Browse GCVE Records

75,726 records in the GCVE database · Updated August 1, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›