MalwareBleeping Computer
9.3 — CRITICAL
Hackers exploit Roundcube flaw to spy on academic researchers
A China-linked threat cluster has been exploiting vulnerable Roundcube servers at U.S. and Canadian universities to steal credentials and deploy backdoor malware. [...]
🤖 AI BriefingAuto-generated threat analysis
🔍Threat Overview
A China-linked threat cluster has been exploiting vulnerabilities in Roundcube webmail servers at US and Canadian universities to steal credentials and deploy backdoor malware, targeting physics and engineering departments among others.
⚙️Technical Details
Attack Vectors
NETWORKLOW
💥Impact Assessment
Severity: CRITICAL
Who Is at Risk
Administrators of Roundcube systems at US and Canadian universities
🛡️Recommended Actions
1Apply the latest security updates that address CVE-2024-42009 and CVE-2025-49113
2Treat mail servers with the same diligence as VPNs and other remote access nodes
3Monitor for suspicious email activity and implement two-factor authentication
📦Affected Products
Roundcube WebmailDebian Debian Linux
🔐NVD Verified DataVERIFIED
CVE-2024-42009 ↗CVSS 9.3 — CRITICAL
Attack Vector
NETWORK
Complexity
LOW
Vector String
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:NWeaknesses
CWE-79
Affected Products (CPE)
Roundcube Webmail
CVE-2025-49113 ↗CVSS 8.8 — HIGH
Attack Vector
NETWORK
Complexity
LOW
Vector String
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HWeaknesses
CWE-502
Affected Products (CPE)
Debian Debian LinuxRoundcube Webmail
Patches & References
Read the full article
This is a curated summary. The complete article is available at Bleeping Computer.