CVE-2026-62642

Name of the Vulnerable Software and Affected Versions Roundcube Webmail versions prior to 1.6.17 Roundcube Webmail versions 1.7.x prior to 1.7.2

Description An infinite loop exists in the TNEF decoder, which can cause a denial of service when a user opens an email containing a TNEF attachment. TNEF (Transport Neutral Encapsulation Format) is a proprietary format used by Microsoft Outlook to encapsulate formatting and metadata.

Recommendations Update to version 1.6.17 or later. Update to version 1.7.2 or later.