<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: webmail messenger</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2022-28218: An issue was discovered in CipherMail Webmail Messenger 1.1.1 through 4.1.4</title><link>https://patchthecve.com/cve/CVE-2022-28218.html</link><guid>https://patchthecve.com/cve/CVE-2022-28218.html</guid><pubDate>Wed, 17 Jun 2026 04:38:10 +0000</pubDate><description>MEDIUM 5.5: An issue was discovered in CipherMail Webmail Messenger 1.1.1 through 4.1.4. A local attacker could access secret keys (found in a Roundcube configuration file) that are used to protect Webmail user passwords and two-factor authentication (2FA).</description></item><item><title>CVE-2020-12714: An issue was discovered in CipherMail Community Gateway Virtual Appliances and Professional/Enterprise Gateway</title><link>https://patchthecve.com/cve/CVE-2020-12714.html</link><guid>https://patchthecve.com/cve/CVE-2020-12714.html</guid><pubDate>Wed, 17 Jun 2026 02:52:10 +0000</pubDate><description>MEDIUM 5.9: An issue was discovered in CipherMail Community Gateway Virtual Appliances and Professional/Enterprise Gateway Virtual Appliances versions 1.0.1 through 4.7.1-0 and CipherMail Webmail Messenger Virtual Appliances 1.1.1 through 3.1.1-0. A Diffie-Hellman parameter of insufficient size could allow man-</description></item><item><title>CVE-2020-12713: An issue was discovered in CipherMail Community Gateway and Professional/Enterprise Gateway 1.0.1 through 4.7.</title><link>https://patchthecve.com/cve/CVE-2020-12713.html</link><guid>https://patchthecve.com/cve/CVE-2020-12713.html</guid><pubDate>Wed, 17 Jun 2026 02:52:10 +0000</pubDate><description>HIGH 7.2: An issue was discovered in CipherMail Community Gateway and Professional/Enterprise Gateway 1.0.1 through 4.7.1-0 and CipherMail Webmail Messenger 1.1.1 through 3.1.1-0. Attackers with administrative access to the web interface have multiple options to escalate their privileges to the Unix root acco</description></item></channel></rss>