SEPPmail Secure Email Gateway before version 15.0.1 incorrectly interprets email addresses in the email headers, causing an interpretation conflict with other mail infrastructure that allows an attacker to fake the source of the email or decrypt it.
CVSS Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:L/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XSeppmail
APPSeppmail< 15.0.1
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
Related vulnerabilities
CVE-2026-2743CRITICAL10.0PL ✓same product
RCE przez path traversal i zapis pliku w SeppMail User Web Interface
CVE-2026-27441CRITICAL9.5PL ✓same product
Command injection w SEPPmail Secure Email Gateway poprzez hasło szyfrowania PDF
CVE-2026-27442CRITICAL9.3PL ✓same product
SEPPmail Secure Email Gateway — path traversal w interfejsie GINA
CVE-2026-27443HIGH8.2same product
SEPPmail Secure Email Gateway before version 15.0.1 does not properly sanitize the headers from S/MIME protect...
CVE-2026-2748HIGH7.8same product
SEPPmail Secure Email Gateway before version 15.0.1 improperly validates S/MIME certificates issued for email ...