Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Release: SEPPmail Secure Email Gateway 15.0.4 Clear all filters
TI-2026-32137 CVE-2026-44126 · GHSA-69wg-m4qc-c3qc

Insecure deserialization in SEPPmail Secure Email Gateway

Priority MEDIUM 42

SEPPmail Secure Email Gateway before version 15.0.4 insecurely deserializes untrusted data, which can be reached from the new GINA UI and may allow unauthenticated remote attackers to execute code via a crafted serialize…

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.00472 Published 2026-05-08 Fixed in 15.0.4 CWE-502
TI-2026-32136 CVE-2026-44125 · GHSA-x76h-jjpq-cp24

Missing Authorization in GINAv2

Priority MEDIUM 48

SEPPmail Secure Email Gateway before version 15.0.4 fails to enforce authorization checks for multiple endpoints in the new GINA UI, allowing unauthenticated remote attackers to access functionality that should require a…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00386 Published 2026-05-08 Fixed in 15.0.4 CWE-862
TI-2026-32140 CVE-2026-44129 · GHSA-wc7f-vvj8-28m9

Server-side template injection

Priority LOW 37

SEPPmail Secure Email Gateway before version 15.0.4 contains a server-side template injection vulnerability in the new GINA UI because an endpoint accepts attacker-controlled template, allowing remote attackers to execut…

CVSS 4.0HIGH 8.3 Network No auth No interaction EPSS 0.00535 Published 2026-05-08 Fixed in 15.0.4 CWE-1336
TI-2026-32138 CVE-2026-44127 · GHSA-gh4w-5vrf-hhcg

Local File Inclusion (LFI) and Arbitrary File Deletion

Priority MEDIUM 60

SEPPmail Secure Email Gateway before version 15.0.4 contains an unauthenticated path traversal vulnerability in the identifier parameter of /api.app/attachment/preview that allows remote attackers to read arbitrary local…

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.14814 Published 2026-05-08 Fixed in 15.0.4 CWE-73
TI-2026-06922 CVE-2026-7864 · GHSA-987g-rmgr-mpfx

Exposure of Sensitive Information to an Unauthorized Actor

Priority MEDIUM 53

SEPPmail Secure Email Gateway before version 15.0.4 exposes server environment variables through an unauthenticated endpoint in the new GINA UI, allowing remote attackers to obtain sensitive system information.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.16108 Published 2026-05-08 Fixed in 15.0.4 CWE-497