[CRITICAL] Roundcube Webmail Vulnerable to Authenticated RCE via PHP Object Deserialization

PKSA-495x-fjsx-x92b CVE-2025-49113 GHSA-8j8w-wwqc-x596

Affected package: roundcube/roundcubemail

Affected version: >=1.6.0,<1.6.11|<1.5.10

Reported by:
GitHub