Devices / Self-hosted apps & servers / Roundcube Webmail

Roundcube Webmail releases

critical fix

Roundcube Webmail is tracked under self-hosted apps & servers. Its latest version, 1.7.4, shipped on Sep 6, 2026.

Latest version
1.7.4
Released
Category
Self-hosted apps & servers
Last checked

How to update Roundcube Webmail

Open update page ↗
  1. Read the release notes first — self-hosted projects break config and schemas between versions more often than appliances do.
  2. Docker: pull the new image tag and recreate the container (`docker compose pull && docker compose up -d`).
  3. Package or bare metal: update through your distribution's package manager, or replace the binary from the releases page.
  4. Back up the config and database directory first. For most projects a downgrade is not supported once the schema has migrated.

Always download firmware from the manufacturer or project itself. Firmwarely links out; it never hosts firmware.

What changed

This is a security update to the version 1.7 of Roundcube Webmail. It provides fixes to recently reported security vulnerabilities: Fix CSS declaration smuggling via un-encoded ampersand emission, reported by Zach Hanley of Horizon3.ai Fix CSS property injection via body background attribute, repor…

Manufacturer release notes ↗

Version history

1.7.4

FAQ

What is the latest version of Roundcube Webmail?

Version 1.7.4, released Sep 6, 2026. This page is refreshed every 30 minutes from the manufacturer's release page.

How do I update Roundcube Webmail?

See the step-by-step above. Pull the new image or package and restart the service. Read the release notes and back up the data directory first; most projects can't downgrade once the database has migrated.

How does Firmwarely know when there's a new version?

Every 30 minutes we read the manufacturer's official release page for the Roundcube Webmail and record the version, date and changelog. Subscribers watching this device get one email a day when it changed.

Is this an official Roundcube page?

No. Firmwarely is independent. Project and product names belong to their owners; always install releases from the project's own source.

Get alerts for Roundcube Webmail

One email when a new or critical firmware ships. Free for up to 3 devices.