Skip to content
The Nexus
DossierENTITY

CVE-2025-49113

Coverage of CVE-2025-49113 in the Nexus archive.

Earliest in view: Jul 7 · 09:00 UTCMost recent: Jul 7 · 09:00 UTC
Co-mentioned in this coverage
Proofpointorganization1Greg Lesnewichperson1UNK_MassTractionorganization1Roundcubetopic1CVE-2024-42009topic1U.S. and Canadian universitiesplace1physics and engineering departmentstopic1
Recent coverage
  • SECURITYJul 7 · 09:00 UTCCYBERSCOOP
    Suspected Chinese espionage group used a Roundcube exploit chain to burrow into universities

    China-aligned attackers exploited Roundcube vulnerabilities to breach U.S. and Canadian university networks, targeting physics and engineering departments to steal data and establish persistent access. The campaign, linked to the UNK_MassTraction cluster, used CVE-2024-42009 and CVE-2025-49113 to execute JavaScript and gain mailserver access via phishing emails.