Security News CISA: Recently patched RoundCube flaws now exploited in attacks BleepingComputer Daniel Bender 23 Feb 2026 CISA flagged two Roundcube Webmail vulnerabilities as actively exploited in attacks and ordered U.S. federal agencies to patch them within three weeks.