Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 29

Export CSV
CVE-2026-29140

S/MIME Signature Additional Certificate

SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to cause attacker-controlled certificates to be used for future encryption to a victim by adding the certificates to S/MIME signatures.

CVSS 4.0 · 7.7 High EPSS < 1% KEV · Not listed
Vendors
Seppmail
Products
Secure Email Gateway Seppmail Secure Email Gateway
CVE-2026-27443

S/MIME Decryption Tag Sanitization Bypass

SEPPmail Secure Email Gateway before version 15.0.1 does not properly sanitize the headers from S/MIME protected MIME entities, allowing an attacker to control trusted headers.

CVSS 4.0 · 8.2 High EPSS < 1% KEV · Not listed
Vendors
Seppmail
Products
Seppmail Seppmail Secure Email Gateway
CVE-2026-2747

PGP Mixed Plaintext and Encrypted Content

SEPPmail Secure Email Gateway before version 15.0.1 decrypts inline PGP messages without isolating them from surrounding unencrypted content, allowing exposure of sensitive information to an unauthorized actor.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Seppmail
Products
Seppmail Seppmail Secure Email Gateway
CVE-2026-27442

zip_attachments Path Traversal

The GINA web interface in SEPPmail Secure Email Gateway before version 15.0.1 does not properly check attachment filenames in GINA-encrypted emails, allowing an attacker to access files on the gateway.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Seppmail
Products
Seppmail Seppmail Secure Email Gateway
CVE-2026-2748

S/MIME Certificate Subject Whitespace

SEPPmail Secure Email Gateway before version 15.0.1 improperly validates S/MIME certificates issued for email addresses containing whitespaces, allowing signature spoofing.

CVSS 4.0 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Seppmail
Products
Seppmail Seppmail Secure Email Gateway