CVE-2026-114420

Vendor

SEPPmail AG

Product

SEPPmail Secure Email Gateway (SEG)

CVSS v4.0

6.9 AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weakness

CWE-90

Exposure class

Email

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 36
   CVE NVD 4h ago

   SEPPmail Secure Email Gateway before 15.1.1 does not neutralize LDAP metacharacters in an unauthenticated account-selection input in its GINA web…

   SEPPmail Secure Email Gateway before 15.1.1 does not neutralize LDAP metacharacters in an unauthenticated account-selection input in its GINA web interface. A remote unauthenticated attacker can enumerate email addresses.

   CVSS 6.9 CVE-2026-114420 SEPPmail AG