Vulnerabilities

CVSS

9.3 Critical

Vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Risk score

74.4

Published

2026-05-08

Status

Published

SEPPmail Secure Email Gateway before version 15.0.4 fails to enforce authorization checks for multiple endpoints in the new GINA UI, allowing unauthenticated remote attackers to access functionality that should require a valid session.

Weaknesses

CWE-862

Coverage 1

vulnerability

SEPPMail Secure E-Mail Gateway Vulnerabilities Enable RCE and Mail Traffic Access

SEPPMail Secure E-Mail Gateway has been found to contain multiple critical vulnerabilities, including remote code execution (RCE) and unauthorized access to mail traffic. These flaws, detailed in a report by InfoGuard La…

The Hacker News · May 19, 2026 Critical

CVE-2026-2743CVE-2026-7864CVE-2026-44125remote code executionemail securitylog rotation

All articles mentioning it

Advisories and references

• downloads.seppmail.com/extrelnotes/150/ERN15.0.html#security
• labs.infoguard.ch/posts/seppmail_secure_e-mail_gateway_rce_vulnerabi...