SSEPPmail

Products

Exploited and recent CVEs

• CVE-2026-9592 High 7.5 Sensitive Information Disclosure in HTTP header 0.2%
• CVE-2026-29136 Medium 5.3 CA Notification HTML Injection 0.1%
• CVE-2026-29139 High 7.8 GINA State Confusion Account Takeover 0.3%
• CVE-2026-29144 High 7.8 Unicode Subject Tags 0.2%
• CVE-2026-29143 High 7.8 S/MIME Decryption Impersonation 0.3%
• CVE-2026-29138 Medium 6.3 PGP Decryption Sender LDAP Injection 0.2%
• CVE-2026-29131 Medium 4.9 PGP Decryption Recipient LDAP Injection 0.2%
• CVE-2026-29142 Medium 6.3 Plaintext secure-mail.html 0.1%
• CVE-2026-29137 Medium 5.3 Long Subject Untagging 0.2%
• CVE-2026-29141 High 7.7 Bounded Subject Tag Sanitization 0.2%
• CVE-2026-29135 Medium 5.3 Webmail Password Tag Sanitization Bypass 0.3%
• CVE-2026-29134 Medium 5.3 GINA Domain Switch 0.2%
• CVE-2026-29140 High 7.7 S/MIME Signature Additional Certificate 0.1%
• CVE-2026-29133 Medium 5.3 UID Regex Bypass 0.2%
• CVE-2026-29132 Medium 6.3 ESWmail-Verify Bypass 0.3%
• CVE-2026-2743 Critical 10.0 SEPPmail User Web Interface Arbitrary File Write to RCE 0.9%
• CVE-2026-27441 Critical 9.5 PDF Password CMDi 0.3%
• CVE-2026-2748 High 7.8 S/MIME Certificate Subject Whitespace 0.1%
• CVE-2026-27442 Critical 9.3 zip_attachments Path Traversal 0.5%
• CVE-2026-27445 Medium 6.9 PGP Signature Reflection 0.1%
• CVE-2026-27444 High 7.8 Header Email Address Parsing 0.2%
• CVE-2026-2747 Medium 6.9 PGP Mixed Plaintext and Encrypted Content 0.3%
• CVE-2026-27443 High 8.2 S/MIME Decryption Tag Sanitization Bypass 0.2%
• CVE-2026-2746 Medium 6.9 Missing PGP Signature Tag 0.2%
• CVE-2022-41871 Medium 6.0 SEPPmail through 12.1.17 allows command injection within the Admin Portal. An authenticated attacker is able to execute arbitrary code in the context of the user root. 1.1%