SEPPmail records

26 published records for vendor seppmail.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 2
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

26 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
40Plan	CVE-2026-2743No exploit	SEPPmail User Web Interface Arbitrary File Write to RCEseppmail · seppmail · CWE-22 pre-auth RCE Path traversal	Critical10.0	—	1.0%	Mar 5, 2026
38Monitor	CVE-2026-27441No exploit	SEPPmail Secure Email Gateway before version 15.0.1 insufficiently neutralizes the PDF encryption password, allowing OS command execution.seppmail · seppmail · CWE-78 pre-auth RCE Command injection	Critical9.5	—	0.5%	Mar 4, 2026
37Monitor	CVE-2026-27442No exploit	zip_attachments Path Traversalseppmail · seppmail · CWE-22 Path traversal	Critical9.3	—	0.5%	Mar 4, 2026
35Monitor	CVE-2022-41871No exploit	SEPPmail through 12.1.17 allows command injection within the Admin Portal.seppmail · seppmail · CWE-78 RCE Command injection	High8.8	—	1.1%	Apr 28, 2025
32Monitor	CVE-2026-27443No exploit	S/MIME Decryption Tag Sanitization Bypassseppmail · seppmail · CWE-20 Pre-auth	High8.2	—	0.4%	Mar 4, 2026
31Monitor	CVE-2026-29139No exploit	GINA State Confusion Account Takeoverseppmail · secure email gateway · CWE-288 Pre-auth Auth bypass	High7.8	—	0.5%	Apr 2, 2026
31Monitor	CVE-2026-29143No exploit	S/MIME Decryption Impersonationseppmail · secure email gateway · CWE-20 Pre-auth	High7.8	—	0.4%	Apr 2, 2026
31Monitor	CVE-2026-27444No exploit	Header Email Address Parsingseppmail · seppmail · CWE-436 Pre-auth	High7.8	—	0.4%	Mar 4, 2026
31Monitor	CVE-2026-29144No exploit	Unicode Subject Tagsseppmail · secure email gateway · CWE-20 Pre-auth	High7.8	—	0.3%	Apr 2, 2026
31Monitor	CVE-2026-2748No exploit	S/MIME Certificate Subject Whitespaceseppmail · seppmail · CWE-295 Pre-auth Weak crypto	High7.8	—	0.2%	Mar 4, 2026
30Monitor	CVE-2026-29141No exploit	Bounded Subject Tag Sanitizationseppmail · secure email gateway · CWE-20 Pre-auth	High7.7	—	0.3%	Apr 2, 2026
30Monitor	CVE-2026-29140No exploit	S/MIME Signature Additional Certificateseppmail · secure email gateway · CWE-295 Pre-auth Weak crypto	High7.7	—	0.2%	Apr 2, 2026
27Monitor	CVE-2026-2747No exploit	PGP Mixed Plaintext and Encrypted Contentseppmail · seppmail · CWE-200 Pre-auth Info leak	Medium6.9	—	0.4%	Mar 4, 2026
27Monitor	CVE-2026-27445No exploit	PGP Signature Reflectionseppmail · seppmail · CWE-347 Pre-auth Weak crypto	Medium6.9	—	0.2%	Mar 4, 2026
27Monitor	CVE-2026-2746No exploit	Missing PGP Signature Tagseppmail · seppmail · CWE-347 Pre-auth Weak crypto	Medium6.9	—	0.2%	Mar 4, 2026
25Monitor	CVE-2026-29132No exploit	ESWmail-Verify Bypassseppmail · secure email gateway · CWE-306 Pre-auth Auth bypass	Medium6.3	—	0.4%	Apr 2, 2026
25Monitor	CVE-2026-29138No exploit	PGP Decryption Sender LDAP Injectionseppmail · secure email gateway · CWE-90 Pre-auth	Medium6.3	—	0.4%	Apr 2, 2026
25Monitor	CVE-2026-29142No exploit	Plaintext secure-mail.htmlseppmail · secure email gateway · CWE-325 Pre-auth	Medium6.3	—	0.2%	Apr 2, 2026
24Monitor	CVE-2021-31739No exploit	The SEPPmail solution is vulnerable to a Cross-Site Scripting vulnerability (XSS), because user input is not correctly encoded in HTML attriseppmail · seppmail · CWE-79 Pre-auth XSS	Medium6.1	—	0.4%	Nov 18, 2022
24Monitor	CVE-2021-31740No exploit	SEPPMail's web frontend, user input is not embedded correctly in the web page and therefore leads to cross-site scripting vulnerabilities (Xseppmail · seppmail · CWE-79 Pre-auth XSS	Medium6.1	—	0.4%	Nov 30, 2022
21Monitor	CVE-2026-29135No exploit	Webmail Password Tag Sanitization Bypassseppmail · secure email gateway · CWE-20 Pre-auth	Medium5.3	—	0.4%	Apr 2, 2026
21Monitor	CVE-2026-29133No exploit	SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to upload PGP keys with UIDs that do not match their email address.seppmail · secure email gateway · CWE-20	Medium5.3	—	0.4%	Apr 2, 2026
21Monitor	CVE-2026-29134No exploit	SEPPmail Secure Email Gateway before version 15.0.3 allows an external user to modify GINA webdomain metadata and bypass per-domain restrictseppmail · secure email gateway · CWE-807	Medium5.3	—	0.4%	Apr 2, 2026
21Monitor	CVE-2026-29137No exploit	Long Subject Untaggingseppmail · secure email gateway · CWE-20 Pre-auth	Medium5.3	—	0.3%	Apr 2, 2026
21Monitor	CVE-2026-29136No exploit	CA Notification HTML Injectionseppmail · secure email gateway · CWE-79 Pre-auth XSS	Medium5.3	—	0.2%	Apr 2, 2026

CVE-2026-2743
40Plan
SEPPmail User Web Interface Arbitrary File Write to RCE
CriticalCVSS 10.0No exploitEPSS 1%
- pre-auth RCE
- Path traversal
seppmail · seppmailMar 5, 2026
CVE-2026-27441
38Monitor
SEPPmail Secure Email Gateway before version 15.0.1 insufficiently neutralizes the PDF encryption password, allowing OS command execution.
CriticalCVSS 9.5No exploitEPSS 1%
- pre-auth RCE
- Command injection
seppmail · seppmailMar 4, 2026
CVE-2026-27442
37Monitor
zip_attachments Path Traversal
CriticalCVSS 9.3No exploitEPSS 0%
- Path traversal
seppmail · seppmailMar 4, 2026
CVE-2022-41871
35Monitor
SEPPmail through 12.1.17 allows command injection within the Admin Portal.
HighCVSS 8.8No exploitEPSS 1%
- RCE
- Command injection
seppmail · seppmailApr 28, 2025
CVE-2026-27443
32Monitor
S/MIME Decryption Tag Sanitization Bypass
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
seppmail · seppmailMar 4, 2026
CVE-2026-29139
31Monitor
GINA State Confusion Account Takeover
HighCVSS 7.8No exploitEPSS 0%
- Pre-auth
- Auth bypass
seppmail · secure email gatewayApr 2, 2026
CVE-2026-29143
31Monitor
S/MIME Decryption Impersonation
HighCVSS 7.8No exploitEPSS 0%
- Pre-auth
seppmail · secure email gatewayApr 2, 2026
CVE-2026-27444
31Monitor
Header Email Address Parsing
HighCVSS 7.8No exploitEPSS 0%
- Pre-auth
seppmail · seppmailMar 4, 2026
CVE-2026-29144
31Monitor
Unicode Subject Tags
HighCVSS 7.8No exploitEPSS 0%
- Pre-auth
seppmail · secure email gatewayApr 2, 2026
CVE-2026-2748
31Monitor
S/MIME Certificate Subject Whitespace
HighCVSS 7.8No exploitEPSS 0%
- Pre-auth
- Weak crypto
seppmail · seppmailMar 4, 2026
CVE-2026-29141
30Monitor
Bounded Subject Tag Sanitization
HighCVSS 7.7No exploitEPSS 0%
- Pre-auth
seppmail · secure email gatewayApr 2, 2026
CVE-2026-29140
30Monitor
S/MIME Signature Additional Certificate
HighCVSS 7.7No exploitEPSS 0%
- Pre-auth
- Weak crypto
seppmail · secure email gatewayApr 2, 2026
CVE-2026-2747
27Monitor
PGP Mixed Plaintext and Encrypted Content
MediumCVSS 6.9No exploitEPSS 0%
- Pre-auth
- Info leak
seppmail · seppmailMar 4, 2026
CVE-2026-27445
27Monitor
PGP Signature Reflection
MediumCVSS 6.9No exploitEPSS 0%
- Pre-auth
- Weak crypto
seppmail · seppmailMar 4, 2026
CVE-2026-2746
27Monitor
Missing PGP Signature Tag
MediumCVSS 6.9No exploitEPSS 0%
- Pre-auth
- Weak crypto
seppmail · seppmailMar 4, 2026
CVE-2026-29132
25Monitor
ESWmail-Verify Bypass
MediumCVSS 6.3No exploitEPSS 0%
- Pre-auth
- Auth bypass
seppmail · secure email gatewayApr 2, 2026
CVE-2026-29138
25Monitor
PGP Decryption Sender LDAP Injection
MediumCVSS 6.3No exploitEPSS 0%
- Pre-auth
seppmail · secure email gatewayApr 2, 2026
CVE-2026-29142
25Monitor
Plaintext secure-mail.html
MediumCVSS 6.3No exploitEPSS 0%
- Pre-auth
seppmail · secure email gatewayApr 2, 2026
CVE-2021-31739
24Monitor
The SEPPmail solution is vulnerable to a Cross-Site Scripting vulnerability (XSS), because user input is not correctly encoded in HTML attri
MediumCVSS 6.1No exploitEPSS 0%
- Pre-auth
- XSS
seppmail · seppmailNov 18, 2022
CVE-2021-31740
24Monitor
SEPPMail's web frontend, user input is not embedded correctly in the web page and therefore leads to cross-site scripting vulnerabilities (X
MediumCVSS 6.1No exploitEPSS 0%
- Pre-auth
- XSS
seppmail · seppmailNov 30, 2022
CVE-2026-29135
21Monitor
Webmail Password Tag Sanitization Bypass
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
seppmail · secure email gatewayApr 2, 2026
CVE-2026-29133
21Monitor
SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to upload PGP keys with UIDs that do not match their email address.
MediumCVSS 5.3No exploitEPSS 0%
seppmail · secure email gatewayApr 2, 2026
CVE-2026-29134
21Monitor
SEPPmail Secure Email Gateway before version 15.0.3 allows an external user to modify GINA webdomain metadata and bypass per-domain restrict
MediumCVSS 5.3No exploitEPSS 0%
seppmail · secure email gatewayApr 2, 2026
CVE-2026-29137
21Monitor
Long Subject Untagging
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
seppmail · secure email gatewayApr 2, 2026
CVE-2026-29136
21Monitor
CA Notification HTML Injection
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
- XSS
seppmail · secure email gatewayApr 2, 2026