Secure Email Gateway
Approved changes feed: RSS · Atom
cpe:2.3:a:seppmail_ag:secure_email_gateway:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Seppmail Ag (76c11732-a9e8-510a-9143-4f1414abb72a) |
|---|---|
| Product | Secure Email Gateway (8eb62b0c-0c82-5198-b897-d4075cdd5c5c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-8811 |
vulnerable | 2026-07-29 01:09:06.295342 |
Path traversal in PDF generation module
SEPPmail versions before 15.0.5 allow improper handling of attachment filenames during encrypted PDF generation. An attacker can exploit this to create new files outside the intended directory, potentially placing files in web-accessible locations.
Published: 2026-06-18T09:05:46.285Z
Updated: 2026-06-18T12:14:45.784Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-7864 |
vulnerable | 2026-06-08 08:08:57.746058 |
Exposure of Sensitive Information to an Unauthorized Actor
SEPPmail Secure Email Gateway before version 15.0.4 exposes server environment variables through an unauthenticated endpoint in the new GINA UI, allowing remote attackers to obtain sensitive system information.
Published: 2026-05-08T13:12:17.617Z
Updated: 2026-05-18T16:09:19.591Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-44129 |
vulnerable | 2026-06-08 08:03:18.100431 |
Server-side template injection
SEPPmail Secure Email Gateway before version 15.0.4 contains a server-side template injection vulnerability in the new GINA UI because an endpoint accepts attacker-controlled template, allowing remote attackers to execute arbitrary template expressions and potentially achieve remote code execution depending on the enabled template plugins.
Published: 2026-05-08T13:14:36.616Z
Updated: 2026-05-18T16:14:51.593Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-44128 |
vulnerable | 2026-06-08 08:03:18.100159 |
Unauthenticated Remote Code Execution
SEPPmail Secure Email Gateway before version 15.0.2.1 allows unauthenticated remote code execution in the new GINA UI because an endpoint passes attacker-controlled input from a parameter to Perl's eval.
Published: 2026-05-08T13:13:46.034Z
Updated: 2026-05-18T16:13:51.596Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-44127 |
vulnerable | 2026-06-08 08:03:18.099877 |
Local File Inclusion (LFI) and Arbitrary File Deletion
SEPPmail Secure Email Gateway before version 15.0.4 contains an unauthenticated path traversal vulnerability in the identifier parameter of /api.app/attachment/preview that allows remote attackers to read arbitrary local files and trigger deletion of files in the targeted directory with the privileges of the api.app process.
Published: 2026-05-08T13:13:05.667Z
Updated: 2026-05-18T16:12:36.348Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-44126 |
vulnerable | 2026-06-08 08:03:18.099605 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-44125 |
vulnerable | 2026-06-08 08:03:18.099267 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.