SEPPmail AG
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Secure Email Gateway | 8 | – | Sep 3, 2026 |
| SEPPmail Secure Email Gateway (SEG) | 7 | – | Nov 4, 2026 |
Exploited and recent CVEs
- CVE-2026-114421 Empty initial password permits GINA account takeover 0.3%
- CVE-2026-114420 LDAP wildcard injection exposes GINA recipient accounts 0.4%
- CVE-2026-114426 Pre-authentication upload parsing permits resource exhaustion 0.3%
- CVE-2026-114425 Forged LFT metadata permits arbitrary file read and deletion 0.3%
- CVE-2026-114424 Code execution through double evaluation in address replacement rules 0.3%
- CVE-2026-84830 OS command injection in privileged configuration handling 1.2%
- CVE-2026-84832 Unsafe deserialization in the REST interface 0.6%
- CVE-2026-84831 Mandatory MFA bypass before enrollment 0.5%
- CVE-2026-8811 Path traversal in PDF generation module 0.3%
- CVE-2026-44126 Insecure deserialization 0.5%
- CVE-2026-44125 Missing Authorization in GINAv2 0.4%
- CVE-2026-44129 Server-side template injection 0.5%
- CVE-2026-44128 Unauthenticated Remote Code Execution 0.8%
- CVE-2026-44127 Local File Inclusion (LFI) and Arbitrary File Deletion 14.8%
- CVE-2026-7864 Exposure of Sensitive Information to an Unauthorized Actor 16.1%