SEPPmail AG SEPPmail Secure Email Gateway (SEG)

• CVE-2026-114421 High 8.3 Empty initial password permits GINA account takeover 0.3%
• CVE-2026-114420 Medium 6.9 LDAP wildcard injection exposes GINA recipient accounts 0.4%
• CVE-2026-114426 High 8.7 Pre-authentication upload parsing permits resource exhaustion 0.3%
• CVE-2026-114425 Critical 9.2 Forged LFT metadata permits arbitrary file read and deletion 0.3%
• CVE-2026-114424 Critical 9.2 Code execution through double evaluation in address replacement rules 0.3%
• CVE-2026-84832 High 8.6 Unsafe deserialization in the REST interface 0.6%
• CVE-2026-84831 High 7.7 Mandatory MFA bypass before enrollment 0.5%