CVE-2026-114421

SEPPmail Secure Email Gateway versions before 15.1.1 is vulnerable to an account takeover due to a weak password recovery mechanism . The flaw allows a remote unauthenticated attacker who identifies a created but unregistered GINA account with an empty initial password to perform a password recov...