CVE-2019-15237: Fedoraproject Fedora

High severity, CVSS 7.4. EPSS: 1% chance of exploitation in the next 30 days.

Roundcube Webmail through 1.3.9 mishandles Punycode xn-- domain names, leading to homograph attacks.

Affected products

• Fedoraproject Fedora: version 29 only
• Roundcube Webmail: up to and including 1.3.9

Published 2019-08-20. Last modified 2026-06-17.