The U.S. Cybersecurity and Infrastructure Security Agency
(CISA) on Friday added two security flaws impacting Roundcube
webmail software to its Known Exploited Vulnerabilities (KEV)
catalog, citing evidence of active exploitation. The
vulnerabilities in question are listed below - CVE-2025-49113 (CVSS
score: 9.9) - A deserialization of untrusted data vulnerability
that allows remote code
Read more https://thehackernews.com/2026/02/cisa-adds-two-actively-exploited.html

