[ Vendor · 5 CVEs ]
SEPPmail AG
CVEs affecting SEPPmail AG published in the last 30 days, plus any SEPPmail AG CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-114421 | 4 Nov 2026 | CVSS 8.3 | SEPPmail AG SEPPmail Secure Email Gateway (SEG)SEPPmail Secure Email Gateway before 15.1.1 permits password recovery for a created but unregistered GINA account whose initial password is empty… | |
| CVE-2026-114424 | 4 Nov 2026 | CVSS 9.2 | SEPPmail AG SEPPmail Secure Email Gateway (SEG)SEPPmail Secure Email Gateway before 15.1.1 can evaluate attacker-influenced replacement text as Perl code in sender or recipient replacement rules… | |
| CVE-2026-114425 | 4 Nov 2026 | CVSS 9.2 | SEPPmail AG SEPPmail Secure Email Gateway (SEG)SEPPmail Secure Email Gateway before 15.1.1 trusts a file path supplied in externally provided Large File Transfer attachment metadata. An… | |
| CVE-2026-114426 | 4 Nov 2026 | CVSS 8.7 | SEPPmail AG SEPPmail Secure Email Gateway (SEG)SEPPmail Secure Email Gateway before 15.1.1 processes and writes v1 file-interface upload data before authenticating the caller and without an… | |
| CVE-2026-114420 | 4 Nov 2026 | CVSS 6.9 | SEPPmail AG SEPPmail Secure Email Gateway (SEG)SEPPmail Secure Email Gateway before 15.1.1 does not neutralize LDAP metacharacters in an unauthenticated account-selection input in its GINA web… |