{"id":"CVE-2026-27444","aliases":["EUVD-2026-9380","GHSA-5wwg-q432-32vv"],"status":"published","title":"Header Email Address Parsing","description":"SEPPmail Secure Email Gateway before version 15.0.1 incorrectly interprets email addresses in the email headers, causing an interpretation conflict with other mail infrastructure that allows an attacker to fake the source of the email or decrypt it.","severity":{"version":"4.0","score":7.8,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:L/SI:H/SA:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.00247,"percentile":0.1617,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-436"],"published":"2026-03-04T08:47:05Z","modified":"2026-06-17T10:27:10Z","products":[{"vendor":"seppmail","product":"secure email gateway"},{"vendor":"seppmail","product":"seppmail"},{"vendor":"seppmail ag","product":"secure email gateway"}],"references":[{"url":"https://downloads.seppmail.com/extrelnotes/150/ERN15.0.html#seppmail-vulnerability-disclosure","tags":["release-notes","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-27444"},{"url":"https://github.com/advisories/GHSA-5wwg-q432-32vv"}],"sources":{"cve":[{"id":"CVE-2026-27444","title":"Header Email Address Parsing","description":"SEPPmail Secure Email Gateway before version 15.0.1 incorrectly interprets email addresses in the email headers, causing an interpretation conflict with other mail infrastructure that allows an attacker to fake the source of the email or decrypt it.","status":"published","published":"2026-03-04T08:47:05.758Z","modified":"2026-03-04T19:28:55.122Z","cvss":[{"version":"4.0","score":7.8,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:L/SI:H/SA:N","level":"high","assessor":"cna"}],"cwes":["CWE-436"],"updated_at":"2026-11-02T14:19:49.199185Z"}],"euvd":[{"id":"EUVD-2026-9380","description":"SEPPmail Secure Email Gateway before version 15.0.1 incorrectly interprets email addresses in the email headers, causing an interpretation conflict with other mail infrastructure that allows an attacker to fake the source of the email or decrypt it.","status":"published","published":"2026-03-04T08:47:05Z","modified":"2026-03-04T19:28:55Z","cvss":[{"version":"4.0","score":7.8,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:L/SI:H/SA:N","level":"high"}],"updated_at":"2026-11-02T19:48:11.18109Z"}],"ghsa":[{"id":"GHSA-5wwg-q432-32vv","title":"SEPPmail Secure Email Gateway before version 15.0.1 incorrectly interprets email addresses in the...","description":"SEPPmail Secure Email Gateway before version 15.0.1 incorrectly interprets email addresses in the email headers, causing an interpretation conflict with other mail infrastructure that allows an attacker to fake the source of the email or decrypt it.","status":"published","published":"2026-03-04T09:31:07Z","modified":"2026-03-05T18:31:36Z","cvss":[{"version":"4.0","score":7.8,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:L/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"cwes":["CWE-436"],"updated_at":"2026-11-02T15:06:27.497427Z"}],"nvd":[{"id":"CVE-2026-27444","description":"SEPPmail Secure Email Gateway before version 15.0.1 incorrectly interprets email addresses in the email headers, causing an interpretation conflict with other mail infrastructure that allows an attacker to fake the source of the email or decrypt it.","status":"published","published":"2026-03-04T09:15:56.483Z","modified":"2026-06-17T10:27:10.057Z","cvss":[{"version":"4.0","score":7.8,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:L/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high","assessor":"primary"}],"cwes":["CWE-436"],"updated_at":"2026-11-02T14:12:07.420927Z"}]}}