Structured Query Language is used to program and manage data in relational databases. First making an appearance in an IBM Research paper in 1974, SQL has gained much popularity due to its ...
Characters written into an input form are treated as part of a command to the database. This is the basis of SQL injection.
The vulnerability in question is CVE-2026-48842 (CVSS score: 8.1), a pre-authentication SQL injection in the virtuser_query plugin of Roundcube Webmail versions 1.6.x before 1.6.16 and 1.7.x before ...