Vulnerabilities

TI-2026-84993 CVE-2026-114421 · GHSA-x255-6rhg-mx7j

Empty initial password permits GINA account takeover in SEPPmail Gateway

LOW 36

SEPPmail Secure Email Gateway before 15.1.1 permits password recovery for a created but unregistered GINA account whose initial password is empty without adequately verifying ownership.

CVSS 4.0HIGH 8.3 Network No auth No interaction EPSS 0.00301 Published 2026-11-04 Fixed in 15.1.1 CWE-640

TI-2026-84992 CVE-2026-114420 · GHSA-vf28-m39r-7xjf

LDAP wildcard injection in SEPPmail Gateway exposes recipient email addresses

LOW 30

SEPPmail Secure Email Gateway before 15.1.1 does not neutralize LDAP metacharacters in an unauthenticated account-selection input in its GINA web interface.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00358 Published 2026-11-04 Fixed in 15.1.1 CWE-90

TI-2026-84994 CVE-2026-114426 · GHSA-3hf5-9fwq-fwv2

Pre-authentication upload parsing enables resource exhaustion

LOW 38

SEPPmail Secure Email Gateway before 15.1.1 processes and writes v1 file-interface upload data before authenticating the caller and without an absolute request-size limit.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00322 Published 2026-11-04 Fixed in 15.1.1 CWE-400

TI-2026-84991 CVE-2026-114425 · GHSA-83v7-h64g-wr4c

Forged LFT metadata permits arbitrary file read and deletion in SEPPmail SEG

MEDIUM 40

SEPPmail Secure Email Gateway before 15.1.1 trusts a file path supplied in externally provided Large File Transfer attachment metadata.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.00329 Published 2026-11-04 Fixed in 15.1.1 CWE-73

TI-2026-84990 CVE-2026-114424 · GHSA-3c43-m234-72qw

Code execution through double evaluation in SEPPmail address replacement rules

LOW 39

SEPPmail Secure Email Gateway before 15.1.1 can evaluate attacker-influenced replacement text as Perl code in sender or recipient replacement rules.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.00262 Published 2026-11-04 Fixed in 15.1.1 CWE-95