CVE-2026-114421

Vendor

SEPPmail AG

Product

SEPPmail Secure Email Gateway (SEG)

CVSS v4.0

8.3 AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weakness

CWE-640

Exposure class

Email

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 43
   CVE NVD 2h ago

   SEPPmail Secure Email Gateway before 15.1.1 permits password recovery for a created but unregistered GINA account whose initial password is empty…

   SEPPmail Secure Email Gateway before 15.1.1 permits password recovery for a created but unregistered GINA account whose initial password is empty without adequately verifying ownership. A remote unauthenticated attacker who…

   CVSS 8.3 CVE-2026-114421 SEPPmail AG