Section

Vulnerabilities

CVE records from NVD, ZDI advisories and the CISA KEV catalog, with CVSS, EPSS, SSVC and exploitation state.

5 matching records.

1. 51
   CVE NVD 2h ago

   SEPPmail Secure Email Gateway before 15.1.1 trusts a file path supplied in externally provided Large File Transfer attachment metadata.

   SEPPmail Secure Email Gateway before 15.1.1 trusts a file path supplied in externally provided Large File Transfer attachment metadata. An unauthenticated remote sender can cause the mail-processing worker to disclose, move, or…

   CVSS 9.2 CVE-2026-114425 SEPPmail AG Email
2. 51
   CVE NVD 2h ago

   SEPPmail Secure Email Gateway before 15.1.1 can evaluate attacker-influenced replacement text as Perl code in sender or recipient replacement rules.

   SEPPmail Secure Email Gateway before 15.1.1 can evaluate attacker-influenced replacement text as Perl code in sender or recipient replacement rules. An unauthenticated remote sender can execute operating-system commands in the…

   CVSS 9.2 CVE-2026-114424 SEPPmail AG Email
3. 43
   CVE NVD 2h ago

   SEPPmail Secure Email Gateway before 15.1.1 processes and writes v1 file-interface upload data before authenticating the caller and without an…

   SEPPmail Secure Email Gateway before 15.1.1 processes and writes v1 file-interface upload data before authenticating the caller and without an absolute request-size limit. An unauthenticated remote attacker can occupy workers and…

   CVSS 8.7 CVE-2026-114426 SEPPmail AG Email
4. 43
   CVE NVD 2h ago

   SEPPmail Secure Email Gateway before 15.1.1 permits password recovery for a created but unregistered GINA account whose initial password is empty…

   SEPPmail Secure Email Gateway before 15.1.1 permits password recovery for a created but unregistered GINA account whose initial password is empty without adequately verifying ownership. A remote unauthenticated attacker who…

   CVSS 8.3 CVE-2026-114421 SEPPmail AG Email
5. 36
   CVE NVD 2h ago

   SEPPmail Secure Email Gateway before 15.1.1 does not neutralize LDAP metacharacters in an unauthenticated account-selection input in its GINA web…

   SEPPmail Secure Email Gateway before 15.1.1 does not neutralize LDAP metacharacters in an unauthenticated account-selection input in its GINA web interface. A remote unauthenticated attacker can enumerate email addresses.

   CVSS 6.9 CVE-2026-114420 SEPPmail AG Email

Same filters as JSON: /api/items?category=vuln&window=30d&vendor=SEPPmail+AG&limit=100. RSS for this section: feed.xml.