TI-2026-07745 Aliases CVE-2026-8811 GHSA-hp2p-h743-jhv4

Path traversal in PDF generation module

LOW 31CWE-22Published 2026-06-18 · Updated 2026-06-18

Key facts

Attack vector: Network
Privileges required: Low
User interaction: None
Attack complexity: Low
Attack requirements: Present
Impact type: —
Confidentiality · integrity · availability: None · High · Low
Fix status: Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA.

Summary

SEPPmail versions before 15.0.5 allow improper handling of attachment filenames during encrypted PDF generation. An attacker can exploit this to create new files outside the intended directory, potentially placing files in web-accessible locations.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00319 25th percentileScored 2026-11-07

Fix Fixed Secure Email Gateway (SEPPmail AG): 15.0.5

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
SEPPmail	Secure Email Gateway	before 15.0.5	15.0.5	Patch available	CNA

Secure Email Gateway VendorSEPPmail Affected before 15.0.5 Fixed in 15.0.5 Patch available CNA

Remediation

Fix · CNA Secure Email Gateway (SEPPmail AG) Fixed in 15.0.5

Timeline

2026-10-02 Threatist record created from CVE-2026-8811
2026-10-03 Alias added: GHSA-hp2p-h743-jhv4

References

Other 1

https://downloads.seppmail.com/extrelnotes/150/ERN15.0.html#possible-path-traversal-vulnerability

TI-2026-02349 SEPPmail User Web Interface Arbitrary File Write to RCE CVSS 4.0CRITICAL 10.0
TI-2026-32138 Local File Inclusion (LFI) and Arbitrary File Deletion CVSS 4.0HIGH 8.8
TI-2021-11768 SEPPMail's web frontend, user input is not embedded correctly in the web page and… CVSS 3.1MEDIUM 6.1
TI-2021-11767 The SEPPmail solution is vulnerable to a Cross-Site Scripting vulnerability (XSS)… CVSS 3.1MEDIUM 6.1
TI-2026-06922 Exposure of Sensitive Information to an Unauthorized Actor CVSS 4.0MEDIUM 6.9
TI-2026-32139 Unauthenticated remote code execution in SEPPmail Secure Email Gateway CVSS 4.0CRITICAL 9.3

See all 41 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences