Vulnerabilities

CVSS

6.9 Medium

Vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Risk score

55.2

Published

2026-05-08

Status

Published

SEPPmail Secure Email Gateway before version 15.0.4 exposes server environment variables through an unauthenticated endpoint in the new GINA UI, allowing remote attackers to obtain sensitive system information.

Weaknesses

CWE-497

Coverage 1

vulnerability

SEPPMail Secure E-Mail Gateway Vulnerabilities Enable RCE and Mail Traffic Access

SEPPMail Secure E-Mail Gateway has been found to contain multiple critical vulnerabilities, including remote code execution (RCE) and unauthorized access to mail traffic. These flaws, detailed in a report by InfoGuard La…

The Hacker News · May 19, 2026 Critical

CVE-2026-2743CVE-2026-7864CVE-2026-44125remote code executionemail securitylog rotation

All articles mentioning it

Advisories and references

• downloads.seppmail.com/extrelnotes/150/ERN15.0.html#security
• labs.infoguard.ch/posts/seppmail_secure_e-mail_gateway_rce_vulnerabi...