Email Header Manipulation Vulnerability in SEPPmail Secure Email Gateway
CVE-2026-27444

7.8HIGH

Key Information:

Vendor

Seppmail

Status
Secure Email Gateway
Vendor
CVE Published:
4 March 2026

What is CVE-2026-27444?

The SEPPmail Secure Email Gateway prior to version 15.0.1 has a vulnerability that misinterprets email addresses within the email headers. This misinterpretation can lead to conflicts with other mail systems, potentially allowing attackers to spoof email sources or decrypt sensitive information. Organizations using this email gateway should update to the latest version to mitigate these risks effectively.

Affected Version(s)

Secure Email Gateway 0 < 15.0.1

References

https://downloads.seppmail.com/extrelnotes/150/ERN15.0.ht...
release-notes

CVSS V4

Score:
7.8
Severity:
HIGH
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Andris Suter-Dörig
Matteo Scarlata
Kenny Paterson
.