Advisories · Technology

SEPPmail Secure Email Gateway.

Every CVE that names SEPPmail Secure Email Gateway among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-29136 CVE record

CVSS 5.3 Medium

CA Notification HTML Injection
- SEPPmail Secure Email Gateway
- Cross-site scripting (XSS)
Not analysed yet 2 Apr 2026
CVE-2026-29139 CVE record

CVSS 7.8 High

GINA State Confusion Account Takeover
- SEPPmail Secure Email Gateway
- Authentication bypass
Not analysed yet 2 Apr 2026
CVE-2026-29144 CVE record

CVSS 7.8 High

Unicode Subject Tags
- SEPPmail Secure Email Gateway
- CWE-20
Not analysed yet 2 Apr 2026
CVE-2026-29143 CVE record

CVSS 7.8 High

S/MIME Decryption Impersonation
- SEPPmail Secure Email Gateway
- CWE-20
Not analysed yet 2 Apr 2026
CVE-2026-29138 CVE record

CVSS 6.3 Medium

PGP Decryption Sender LDAP Injection
- SEPPmail Secure Email Gateway
- Other injection
Not analysed yet 2 Apr 2026
CVE-2026-29131 CVE record

CVSS 4.9 Medium

PGP Decryption Recipient LDAP Injection
- SEPPmail Secure Email Gateway
- Other injection
Not analysed yet 2 Apr 2026
CVE-2026-29142 CVE record

CVSS 6.3 Medium

Plaintext secure-mail.html
- SEPPmail Secure Email Gateway
- CWE-325
Not analysed yet 2 Apr 2026
CVE-2026-29137 CVE record

CVSS 5.3 Medium

Long Subject Untagging
- SEPPmail Secure Email Gateway
- CWE-20
Not analysed yet 2 Apr 2026
CVE-2026-29141 CVE record

CVSS 7.7 High

Bounded Subject Tag Sanitization
- SEPPmail Secure Email Gateway
- CWE-20
Not analysed yet 2 Apr 2026
CVE-2026-29135 CVE record

CVSS 5.3 Medium

Webmail Password Tag Sanitization Bypass
- SEPPmail Secure Email Gateway
- CWE-20
Not analysed yet 2 Apr 2026
CVE-2026-29134 CVE record

CVSS 5.3 Medium

GINA Domain Switch
- SEPPmail Secure Email Gateway
- CWE-807
Not analysed yet 2 Apr 2026
CVE-2026-29140 CVE record

CVSS 7.7 High

S/MIME Signature Additional Certificate
- SEPPmail Secure Email Gateway
- Weak cryptography or TLS
Not analysed yet 2 Apr 2026
CVE-2026-29133 CVE record

CVSS 5.3 Medium

UID Regex Bypass
- SEPPmail Secure Email Gateway
- CWE-20
Not analysed yet 2 Apr 2026
CVE-2026-29132 CVE record

CVSS 6.3 Medium

ESWmail-Verify Bypass
- SEPPmail Secure Email Gateway
- Authentication bypass
Not analysed yet 2 Apr 2026
CVE-2026-27441 CVE record

CVSS 9.5 CriticalCritical · CVSS 9+

PDF Password CMDi
- SEPPmail Secure Email Gateway
- Command injection
Not analysed yet 4 Mar 2026
CVE-2026-2748 CVE record

CVSS 7.8 High

S/MIME Certificate Subject Whitespace
- SEPPmail Secure Email Gateway
- Weak cryptography or TLS
Not analysed yet 4 Mar 2026
CVE-2026-27442 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

zip_attachments Path Traversal
- SEPPmail Secure Email Gateway
- Path traversal
Not analysed yet 4 Mar 2026
CVE-2026-27445 CVE record

CVSS 6.9 Medium

PGP Signature Reflection
- SEPPmail Secure Email Gateway
- Weak cryptography or TLS
Not analysed yet 4 Mar 2026
CVE-2026-27444 CVE record

CVSS 7.8 High

Header Email Address Parsing
- SEPPmail Secure Email Gateway
- CWE-436
Not analysed yet 4 Mar 2026
CVE-2026-2747 CVE record

CVSS 6.9 Medium

PGP Mixed Plaintext and Encrypted Content
- SEPPmail Secure Email Gateway
- Information disclosure
Not analysed yet 4 Mar 2026
CVE-2026-27443 CVE record

CVSS 8.2 High

S/MIME Decryption Tag Sanitization Bypass
- SEPPmail Secure Email Gateway
- CWE-20
Not analysed yet 4 Mar 2026
CVE-2026-2746 CVE record

CVSS 6.9 Medium

Missing PGP Signature Tag
- SEPPmail Secure Email Gateway
- Weak cryptography or TLS
Not analysed yet 4 Mar 2026