# SEPPmail AG SEPPmail Secure Email Gateway (SEG).

Every CVE that names SEPPmail AG SEPPmail Secure Email Gateway (SEG) among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Empty initial password permits GINA account takeover](https://agentprime.io/advisories/CVE-2026-114421.md)
  `CVE-2026-114421` · CVE record: SEPPmail AG SEPPmail Secure Email Gateway (SEG) · CVSS 8.3 High · Not analysed yet · Published 4 Nov 2026 · Tags: CWE-640
- [LDAP wildcard injection exposes GINA recipient accounts](https://agentprime.io/advisories/CVE-2026-114420.md)
  `CVE-2026-114420` · CVE record: SEPPmail AG SEPPmail Secure Email Gateway (SEG) · CVSS 6.9 Medium · Not analysed yet · Published 4 Nov 2026 · Tags: Other injection
- [Pre-authentication upload parsing permits resource exhaustion](https://agentprime.io/advisories/CVE-2026-114426.md)
  `CVE-2026-114426` · CVE record: SEPPmail AG SEPPmail Secure Email Gateway (SEG) · CVSS 8.7 High · Not analysed yet · Published 4 Nov 2026 · Tags: Denial of service
- [Forged LFT metadata permits arbitrary file read and deletion](https://agentprime.io/advisories/CVE-2026-114425.md)
  `CVE-2026-114425` · CVE record: SEPPmail AG SEPPmail Secure Email Gateway (SEG) · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Nov 2026 · Tags: Path traversal
- [Code execution through double evaluation in address replacement rules](https://agentprime.io/advisories/CVE-2026-114424.md)
  `CVE-2026-114424` · CVE record: SEPPmail AG SEPPmail Secure Email Gateway (SEG) · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 4 Nov 2026 · Tags: Code injection
- [Unsafe deserialization in the REST interface](https://agentprime.io/advisories/CVE-2026-84832.md)
  `CVE-2026-84832` · CVE record: SEPPmail AG SEPPmail Secure Email Gateway (SEG) · CVSS 8.6 High · Not analysed yet · Published 3 Sept 2026 · Tags: Command injection, Insecure deserialization
- [Mandatory MFA bypass before enrollment](https://agentprime.io/advisories/CVE-2026-84831.md)
  `CVE-2026-84831` · CVE record: SEPPmail AG SEPPmail Secure Email Gateway (SEG) · CVSS 7.7 High · Not analysed yet · Published 3 Sept 2026 · Tags: Authentication bypass

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=seppmail-ag-seppmail-secure-email-gateway-seg>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/seppmail-ag-seppmail-secure-email-gateway-seg/>. Everything for agents: <https://agentprime.io/llms.txt>.