Skip to contentSeppmail Ag Secure Email Gateway vulnerabilities
- seppmail ag secure email gateway (seg)Empty initial password permits GINA account takeoverCVE-2026-1144218.3 High
- seppmail ag secure email gateway (seg)LDAP wildcard injection exposes GINA recipient accountsCVE-2026-1144206.9 Medium
- seppmail ag secure email gateway (seg)Pre-authentication upload parsing permits resource exhaustionCVE-2026-1144268.7 High
- seppmail ag secure email gateway (seg)Forged LFT metadata permits arbitrary file read and deletionCVE-2026-1144259.2 Critical
- seppmail ag secure email gateway (seg)Code execution through double evaluation in address replacement rulesCVE-2026-1144249.2 Critical
- seppmail ag secure email gatewayOS command injection in privileged configuration handlingCVE-2026-848308.6 High
- seppmail ag secure email gateway (seg)Unsafe deserialization in the REST interfaceCVE-2026-848328.6 High
- seppmail ag secure email gateway (seg)Mandatory MFA bypass before enrollmentCVE-2026-848317.7 High
- seppmail ag secure email gatewayPath traversal in PDF generation moduleCVE-2026-88117.1 High
- seppmail ag secure email gatewayInsecure deserializationCVE-2026-441269.2 Critical
- seppmail ag secure email gatewayMissing Authorization in GINAv2CVE-2026-441259.3 Critical
- seppmail ag secure email gatewayServer-side template injectionCVE-2026-441298.3 High
- seppmail ag secure email gatewayUnauthenticated Remote Code ExecutionCVE-2026-441289.3 Critical
- seppmail ag secure email gatewayLocal File Inclusion (LFI) and Arbitrary File DeletionCVE-2026-44127EPSS 14.8%8.8 High
- seppmail ag secure email gatewayExposure of Sensitive Information to an Unauthorized ActorCVE-2026-7864EPSS 16.1%6.9 Medium
- seppmail secure email gatewayCA Notification HTML InjectionCVE-2026-291365.3 Medium
- seppmail secure email gatewayGINA State Confusion Account TakeoverCVE-2026-291397.8 High
- seppmail secure email gatewayUnicode Subject TagsCVE-2026-291447.8 High
- seppmail secure email gatewayS/MIME Decryption ImpersonationCVE-2026-291437.8 High
- seppmail secure email gatewayPGP Decryption Sender LDAP InjectionCVE-2026-291386.3 Medium
- seppmail secure email gatewayPGP Decryption Recipient LDAP InjectionCVE-2026-291314.9 Medium
- seppmail secure email gatewayPlaintext secure-mail.htmlCVE-2026-291426.3 Medium
- seppmail secure email gatewayLong Subject UntaggingCVE-2026-291375.3 Medium
- seppmail secure email gatewayBounded Subject Tag SanitizationCVE-2026-291417.7 High
- seppmail secure email gatewayWebmail Password Tag Sanitization BypassCVE-2026-291355.3 Medium
- seppmail secure email gatewayGINA Domain SwitchCVE-2026-291345.3 Medium
- seppmail secure email gatewayS/MIME Signature Additional CertificateCVE-2026-291407.7 High
- seppmail secure email gatewayUID Regex BypassCVE-2026-291335.3 Medium
- seppmail secure email gatewayESWmail-Verify BypassCVE-2026-291326.3 Medium
- seppmail secure email gateway, seppmail +1 morePDF Password CMDiCVE-2026-274419.5 Critical
- seppmail secure email gateway, seppmail +1 moreS/MIME Certificate Subject WhitespaceCVE-2026-27487.8 High
- seppmail secure email gateway, seppmail +1 morezip_attachments Path TraversalCVE-2026-274429.3 Critical
- seppmail secure email gateway, seppmail +1 morePGP Signature ReflectionCVE-2026-274456.9 Medium
- seppmail secure email gateway, seppmail +1 moreHeader Email Address ParsingCVE-2026-274447.8 High
- seppmail secure email gateway, seppmail +1 morePGP Mixed Plaintext and Encrypted ContentCVE-2026-27476.9 Medium
- seppmail secure email gateway, seppmail +1 moreS/MIME Decryption Tag Sanitization BypassCVE-2026-274438.2 High
- seppmail secure email gateway, seppmail +1 moreMissing PGP Signature TagCVE-2026-27466.9 Medium
- omnissa secure email gatewayOmnissa Secure Email Gateway (SEG) updates address Server-Side Request Forgery (SSRF) vulnerabilityCVE-2025-252358.6 High
- cellopoint secure email gatewayCellopoint Secure Email Gateway - Buffer OverflowCVE-2024-90439.8 Critical
- cellopoint secure email gatewayThe SMTP Listener of Secure Email Gateway from Cellopoint does not properly validate user input,...CVE-2024-67449.8 Critical