{"uuid": "ba9d4a87-c23d-4e6c-b616-62df53705529", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-48842", "type": "seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mwd7ejuryz2i", "content": "CVE-2026-48842 enables unauthenticated SQL injection in Roundcube\u2019s virtuser_query plugin, bypassing escaping and allowing database tampering and data access.\n", "creation_timestamp": "2026-09-25T07:04:49.859172Z"}