Roundcube ≤ 1.6.10 Post-Auth RCE via PHP Object Deserialization [CVE-2025-49113]

https://fearsoff.org/research/roundcube

https://twitter.com/home/status/1930451532832702901

https://twitter.com/home/status/1930468426654286143

https://twitter.com/home/status/1930484303240319191

https://twitter.com/home/status/1930494604521984455

https://twitter.com/home/status/1930495265573634522

https://twitter.com/home/status/1930546349759459822

https://twitter.com/home/status/1930577297620246883

https://twitter.com/home/status/1930602433870213345

https://twitter.com/home/status/1930612034640445575

https://twitter.com/home/status/1930625509110710507

https://twitter.com/home/status/1930715853630447790

https://twitter.com/home/status/1930729022679568581