CVE Intelligence

Vulnerabilidades do Seppmail Secure Email Gateway

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Seppmail Secure Email Gateway: 30 registro(s), com versões afetadas e correções.
cpe:2.3:a:seppmail:secure_email_gateway

CVE-2026-27445 Média · 5.3 CWE-347 04/03/2026
PGP Signature Reflection
SEPPmail Secure Email Gateway before version 15.0.1 does not properly verify that a PGP signature was generated by the expected key, allowing signature spoofing.
CVE-2026-27444 Alta · 7.5 CWE-436 04/03/2026
Header Email Address Parsing
SEPPmail Secure Email Gateway before version 15.0.1 incorrectly interprets email addresses in the email headers, causing an interpretation conflict with other mail infrastructure that allows an attacker to fake the source of the email or decrypt it.
CVE-2026-27443 Alta · 7.5 CWE-20 04/03/2026
S/MIME Decryption Tag Sanitization Bypass
SEPPmail Secure Email Gateway before version 15.0.1 does not properly sanitize the headers from S/MIME protected MIME entities, allowing an attacker to control trusted headers.
CVE-2026-27442 Alta · 7.5 CWE-22 04/03/2026
zip_attachments Path Traversal
The GINA web interface in SEPPmail Secure Email Gateway before version 15.0.1 does not properly check attachment filenames in GINA-encrypted emails, allowing an attacker to access files on the gateway.
CVE-2026-27441 Crítica · 9.8 CWE-78 04/03/2026
PDF Password CMDi
SEPPmail Secure Email Gateway before version 15.0.1 insufficiently neutralizes the PDF encryption password, allowing OS command execution.