Roundcube Pre-Auth SQL Injection Flaw Actively Exploited in the Wild

The Canadian Centre for Cyber Security has warned that a now-patched Roundcube Webmail vulnerability is being actively exploited in the wild. The vulnerability in question is CVE-2026-48842 (CVSS score: 8.1), a pre-authentication SQL injection in the virtuser_query plugin of Roundcube Webmail versions 1.6.x before 1.6.16 and 1.7.x before 1.7.1. The issue stems from a preg_replace() backslash

thehackernews.com ·2026-09-25

Roundcube Pre-Auth SQL Injection Flaw Actively Exploited in the Wild

We haven't written up this one. The Hacker News has the full story — the link below goes straight to it.

Read the original at thehackernews.com →

More in Tech

Colourful JRPG Armed Fantasia has been cancelled, four years after a successful Kickstarter campaign descended into delays and lawsuits

Armed Fantasia , a JRPG pitched as a spiritual successor the PS2-era roleplaying series Wild Arms – and led by former Wild Arms producer Akifumi Kaneko – has been cancelled.

2026-09-25 ·rockpapershotgun.com

AMD Sends Out New Linux Patches Further Enhancing HDMI 2.1 Reliability

Linux 7.4 is going to be the big kernel release where the AMD graphics driver will finally expose HDMI 2.1 by default and comes with features including HDMI FreeSync, VRR, and ALLM.

2026-09-25 ·phoronix.com

I built a tiny library that makes your audit logs tamper-evident

Most apps keep an audit log — who did what, and when. An admin deleted a user, a payment went through, a permission changed.

Chainlog library makes audit logs tamper-evident
Each entry contains SHA-256 hash and previous hash
Verify() function detects tampering in single pass

2026-09-25 ·dev.to

Sony patents PlayStation controller that could accept tap-to-pay from phones and credit cards

The patent, discovered by Dexerto, was published on September 17, 2026, but filed back in March 2025. Titled "Video Game Controller-Driven Information Transfer," it essentially describes a controller with NFC capabilities. Read Entire Article

2026-09-25 ·techspot.com

We have a love-hate relationship with technology, and that’s never going to change

Well over a decade after first teasing the idea of making home deliveries via drone, Amazon is now actively testing the concept in a Dallas suburb and elsewhere. Reports suggest the reaction is, well, mixed. Yes, some customers seem delighted. But other residents complain the drones are loud, annoying, and creepy.

2026-09-25 ·fastcompany.com

Apple to fix iPhone 18 Pro Face ID bug

The Face ID issue that plagued some iPhone 18 Pro users is getting a fix very soon.

2026-09-25 ·mashable.com