CVE-2025-49113: Roundcube File Upload Deserialization Exploit

CVE-2025-49113 is a vulnerability in Roundcube's file upload handler that allows unsafe PHP deserialization, used by TA458 to deploy SpyPress backdoors.