SEPPmail AG

Products

ProductCVEsExploitedLatest
Secure Email Gateway8–Sep 3, 2026
SEPPmail Secure Email Gateway (SEG)7–Nov 4, 2026

Exploited and recent CVEs

  • CVE-2026-114421 High 8.3 Empty initial password permits GINA account takeover 0.3%
  • CVE-2026-114420 Medium 6.9 LDAP wildcard injection exposes GINA recipient accounts 0.4%
  • CVE-2026-114426 High 8.7 Pre-authentication upload parsing permits resource exhaustion 0.3%
  • CVE-2026-114425 Critical 9.2 Forged LFT metadata permits arbitrary file read and deletion 0.3%
  • CVE-2026-114424 Critical 9.2 Code execution through double evaluation in address replacement rules 0.3%
  • CVE-2026-84830 High 8.6 OS command injection in privileged configuration handling 1.2%
  • CVE-2026-84832 High 8.6 Unsafe deserialization in the REST interface 0.6%
  • CVE-2026-84831 High 7.7 Mandatory MFA bypass before enrollment 0.5%
  • CVE-2026-8811 High 7.1 Path traversal in PDF generation module 0.3%
  • CVE-2026-44126 Critical 9.2 Insecure deserialization 0.5%
  • CVE-2026-44125 Critical 9.3 Missing Authorization in GINAv2 0.4%
  • CVE-2026-44129 High 8.3 Server-side template injection 0.5%
  • CVE-2026-44128 Critical 9.3 Unauthenticated Remote Code Execution 0.8%
  • CVE-2026-44127 High 8.8 Local File Inclusion (LFI) and Arbitrary File Deletion 14.8%
  • CVE-2026-7864 Medium 6.9 Exposure of Sensitive Information to an Unauthorized Actor 16.1%