CVE-2026-114424

SEPPmail Secure Email Gateway before 15.1.1 can evaluate attacker-influenced replacement text as Perl code in sender or recipient replacement rules. An unauthenticated remote sender can execute operating-system commands in the mail-processing worker context when an active rule uses message-derive...

CVE-2026-114421

SEPPmail Secure Email Gateway before 15.1.1 permits password recovery for a created but unregistered GINA account whose initial password is empty without adequately verifying ownership. A remote unauthenticated attacker who identifies such an account can set a new password, authenticate as that...

CVE-2026-114425

SEPPmail Secure Email Gateway before 15.1.1 trusts a file path supplied in externally provided Large File Transfer attachment metadata. An unauthenticated remote sender can cause the mail-processing worker to disclose, move, or delete an accessible regular file when LFT is enabled and the message...

CVE-2026-114426

SEPPmail Secure Email Gateway before 15.1.1 processes and writes v1 file-interface upload data before authenticating the caller and without an absolute request-size limit. An unauthenticated remote attacker can occupy workers and consume temporary storage with concurrent or slow requests, causing...

CVE-2026-114420

SEPPmail Secure Email Gateway before 15.1.1 does not neutralize LDAP metacharacters in an unauthenticated account-selection input in its GINA web interface. A remote unauthenticated attacker can enumerate email addresses...

EUVD-2026-116798

SEPPmail Secure Email Gateway before 15.1.1 permits password recovery for a created but unregistered GINA account whose initial password is empty without adequately verifying ownership. A remote unauthenticated attacker who identifies such an account can set a new password, authenticate as that...

CVE-2026-114421

SEPPmail Secure Email Gateway versions before 15.1.1 is vulnerable to an account takeover due to a weak password recovery mechanism . The flaw allows a remote unauthenticated attacker who identifies a created but unregistered GINA account with an empty initial password to perform a password recov...

EUVD-2026-116797

SEPPmail Secure Email Gateway before 15.1.1 does not neutralize LDAP metacharacters in an unauthenticated account-selection input in its GINA web interface. A remote unauthenticated attacker can enumerate email addresses...

CVE-2026-114420

SEPPmail Secure Email Gateway versions before 15.1.1 are vulnerable to an LDAP injection flaw in the GINA web interface . The application fails to neutralize LDAP metacharacters within an unauthenticated account-selection input. A remote, unauthenticated attacker can exploit this vulnerability to...

CVE-2026-114426

The SEPPmail Secure Email Gateway (versions prior to 15.1.1 ) is vulnerable to a resource exhaustion flaw. The software processes and writes v1 file-interface upload data without prior caller authentication and lacks an absolute request-size limit. This allows an unauthenticated remote attacker t...

EUVD-2026-116796

SEPPmail Secure Email Gateway before 15.1.1 processes and writes v1 file-interface upload data before authenticating the caller and without an absolute request-size limit. An unauthenticated remote attacker can occupy workers and consume temporary storage with concurrent or slow requests, causing...

EUVD-2026-116782

SEPPmail Secure Email Gateway before 15.1.1 trusts a file path supplied in externally provided Large File Transfer attachment metadata. An unauthenticated remote sender can cause the mail-processing worker to disclose, move, or delete an accessible regular file when LFT is enabled and the message...

CVE-2026-114425 Forged LFT metadata permits arbitrary file read and deletion

SEPPmail Secure Email Gateway before 15.1.1 trusts a file path supplied in externally provided Large File Transfer attachment metadata. An unauthenticated remote sender can cause the mail-processing worker to disclose, move, or delete an accessible regular file when LFT is enabled and the message...

CVE-2026-114425

SEPPmail Secure Email Gateway versions prior to 15.1.1 are vulnerable to an arbitrary file path traversal issue. The software trusts file paths provided in externally submitted Large File Transfer (LFT) attachment metadata. An unauthenticated remote sender can exploit this to cause the mail-proce...

CVE-2026-114424

SEPPmail Secure Email Gateway versions before 15.1.1 are vulnerable to a critical remote code execution flaw. The vulnerability arises because the system can evaluate attacker-influenced replacement text as Perl code within sender or recipient replacement rules. An unauthenticated remote sender c...

EUVD-2026-116781

SEPPmail Secure Email Gateway before 15.1.1 can evaluate attacker-influenced replacement text as Perl code in sender or recipient replacement rules. An unauthenticated remote sender can execute operating-system commands in the mail-processing worker context when an active rule uses message-derive...

PT-2026-136900

Name of the Vulnerable Software and Affected Versions SEPPmail Secure Email Gateway versions prior to 15.1.1 Description An unauthenticated remote sender can execute operating-system commands in the mail-processing worker context, which operates with root privileges. This occurs when the system...

PT-2026-136901

Name of the Vulnerable Software and Affected Versions SEPPmail Secure Email Gateway versions prior to 15.1.1 Description An issue exists where the system trusts a file path provided in externally supplied Large File Transfer LFT attachment metadata. An unauthenticated remote sender can exploit th...

CVE-2026-84830

SEPPmail Secure Email Gateway before 15.0.7 contains a command injection vulnerability that allows authenticated administrators to execute commands with elevated privileges...

CVE-2026-84831

SEPPmail Secure Email Gateway before 15.0.7 creates a fully privileged session before required multi-factor authentication enrollment is completed. An attacker with the password for an MFA-required but unenrolled account can access protected functionality without providing a second factor...