Roundcube flaw exploited in active code injection attacks

A high-severity Roundcube Webmail vulnerability patched in May is now being actively exploited, per the Canadian Centre for Cyber Security. The exploit enables code injection attacks, indicating a shift from theoretical risk to real-world threat. This matters as Roundcube is widely used, and active exploitation could lead to widespread email compromise.