Approved changes feed: RSS · Atom

cpe:2.3:a:seppmail:seppmail:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSeppmail (3667817e-c09f-5fc5-ac42-cbd850d3536a)
ProductSeppmail (14f340fb-e46d-502f-948d-14601b011ee9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-2748 vulnerable 2026-06-08 07:55:17.460781 S/MIME Certificate Subject Whitespace
SEPPmail Secure Email Gateway before version 15.0.1 improperly validates S/MIME certificates issued for email addresses containing whitespaces, allowing signature spoofing.
Published: 2026-03-04T08:48:58.786Z
Updated: 2026-03-04T16:55:03.279Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-2747 vulnerable 2026-06-08 07:55:17.460288 PGP Mixed Plaintext and Encrypted Content
SEPPmail Secure Email Gateway before version 15.0.1 decrypts inline PGP messages without isolating them from surrounding unencrypted content, allowing exposure of sensitive information to an unauthorized actor.
Published: 2026-03-04T08:46:16.801Z
Updated: 2026-03-04T19:38:50.677Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-2746 vulnerable 2026-06-08 07:55:17.459901 Missing PGP Signature Tag
SEPPmail Secure Email Gateway before version 15.0.1 does not properly communicate PGP signature verification results, leaving users unable to detect forged emails.
Published: 2026-03-04T08:44:31.726Z
Updated: 2026-03-04T21:26:24.749Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-2743 vulnerable 2026-06-08 07:55:17.458647 SEPPmail User Web Interface Arbitrary File Write to RCE
Arbitrary File Write via Path Traversal upload to Remote Code Execution in SeppMail User Web Interface. The affected feature is the large file transfer (LFT). This issue affects SeppMail: 15.0.2.1 and before
Published: 2026-03-05T06:45:21.753Z
Updated: 2026-05-19T19:44:01.855Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-27445 vulnerable 2026-06-08 07:53:22.318253 PGP Signature Reflection
SEPPmail Secure Email Gateway before version 15.0.1 does not properly verify that a PGP signature was generated by the expected key, allowing signature spoofing.
Published: 2026-03-04T08:47:39.953Z
Updated: 2026-03-04T19:26:51.317Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-27444 vulnerable 2026-06-08 07:53:22.317771 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-27443 vulnerable 2026-06-08 07:53:22.317233 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-27442 vulnerable 2026-06-08 07:53:22.316489 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-27441 vulnerable 2026-06-08 07:53:22.315861 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-41871 vulnerable 2026-06-08 05:49:28.778088 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.