Seppmail
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in any Seppmail product.
RSS Feeds for Seppmail security vulnerabilities
Create a CVE RSS feed including security vulnerabilities found in Seppmail products with stack.watch. Just hit watch, then grab your custom RSS feed url.
Products by Seppmail Sorted by Most Security Vulnerabilities since 2018
By the Year
In 2026 there have been 26 vulnerabilities in Seppmail with an average score of 8.2 out of ten. Last year, in 2025 Seppmail had 1 security vulnerability published. That is, 25 more vulnerabilities have already been reported in 2026 as compared to last year. Last year, the average CVE base score was greater by 0.65
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 26 | 8.15 |
| 2025 | 1 | 8.80 |
| 2024 | 0 | 0.00 |
| 2023 | 0 | 0.00 |
| 2022 | 2 | 6.10 |
It may take a day or so for new Seppmail vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Seppmail Security Vulnerabilities
| CVE | Date | Vulnerability | Products |
|---|---|---|---|
| CVE-2026-84832 | Sep 03, 2026 |
SEPPmail SEG 15.0.6- Deserializes Import Enables API Token to Execute CommandsSEPPmail Secure Email Gateway before 15.0.6 deserializes attacker-controlled data in a privileged REST import workflow without adequate validation. An attacker with a privileged API token can execute arbitrary commands with "nobody" privileges. |
|
| CVE-2026-84831 | Sep 03, 2026 |
SEPPmail SEG 15.0.7 MFA Privilege Escalation VulnerabilitySEPPmail Secure Email Gateway before 15.0.7 creates a fully privileged session before required multi-factor authentication enrollment is completed. An attacker with the password for an MFA-required but unenrolled account can access protected functionality without providing a second factor. |
|
| CVE-2026-9592 | Jul 17, 2026 |
SEPPmail Secure Email Gateway 15.0.4.2- GINA Web Portal Session Token DisclosureSEPPmail Secure Email Gateway & SEPPmail Cloud before version 15.0.4.2 allows an attacker to replay & hijack a user session in the GINA web portal, as the session token is disclosed inside the URL and a HTTP header. |
|
| CVE-2026-29136 | Apr 02, 2026 |
SEPPmail Secure Email Gateway <15.0.3: HTML Injection in CA Cert EmailsSEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to inject HTML into notification emails about new CA certificates. |
|
| CVE-2026-29139 | Apr 02, 2026 |
SEPPmail Secure Email Gateway <15.0.3 Account Takeover via GINA ReinitializationSEPPmail Secure Email Gateway before version 15.0.3 allows account takeover by abusing GINA account initialization to reset a victim account password. |
|
| CVE-2026-29144 | Apr 02, 2026 |
SEPPmail SG <15.0.3 Subject Sanitize Bypass via Unicode LookalikeSEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to bypass subject sanitization and forge security tags using Unicode lookalike characters. |
|
| CVE-2026-29143 | Apr 02, 2026 |
SEPPmail Secure Email GW pre-15.0.3: Inner S/MIME msg auth bypassSEPPmail Secure Email Gateway before version 15.0.3 does not properly authenticate the inner message of S/MIME-encrypted MIME entities, allowing an attacker to control trusted headers. |
|
| CVE-2026-29138 | Apr 02, 2026 |
SEPPmail Secure Email Gateway 15.0.3: PGP Signature Spoof via Email AddressSEPPmail Secure Email Gateway before version 15.0.3 allows attackers with a specially crafted email address to claim another user's PGP signature as their own. |
|
| CVE-2026-29131 | Apr 02, 2026 |
SEPPmail SecureEmailGateway <15.0.3: Email Address Leak of Encrypted MailsSEPPmail Secure Email Gateway before version 15.0.3 allows attackers with a specially crafted email address to read the contents of emails encrypted for other users. |
|
| CVE-2026-29142 | Apr 02, 2026 |
SEPPmail Secure Email Gateway <15.0.3: GINA Email ForgerySEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to forge a GINA-encrypted email. |
|