Edit CISA: Recently patched RoundCube flaws now exploited in attacks CISA flagged two Roundcube Webmail vulnerabilities as actively exploited in attacks and ordered U.S. federal agencies to patch them within three weeks. [...]