Vulnerability in SEPPmail Secure Email Gateway Affects Data Integrity
CVE-2026-114426

8.7HIGH

Key Information:

Vendor

Seppmail Ag

Status
Seppmail Secure Email Gateway (seg)
Vendor
CVE Published:
4 November 2026

What is CVE-2026-114426?

The SEPPmail Secure Email Gateway prior to version 15.1.1 contains a file-upload vulnerability that exposes the system to unauthorized access. It processes upload data before verifying the identity of the requester and lacks a cap on the request size. As a result, this can allow an unauthenticated remote attacker to consume system resources and hinder service availability through intentional slow or concurrent requests.

Affected Version(s)

SEPPmail Secure Email Gateway (SEG) 0 < 15.1.1

References

https://docs.seppmail.com/en/20_revision-history.html

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Dario Weiss of InfoGuard Labs
.