Signature Spoofing Vulnerability in SEPPmail Secure Email Gateway by SEPPmail
CVE-2026-27445

6.9MEDIUM

Key Information:

Vendor

Seppmail

Status
Secure Email Gateway
Vendor
CVE Published:
4 March 2026

What is CVE-2026-27445?

SEPPmail Secure Email Gateway prior to version 15.0.1 has a security flaw that fails to properly verify whether a PGP signature was produced by the legitimate key. This oversight allows attackers to forge signatures, potentially leading to unauthorized email content being accepted as valid, thereby compromising the integrity of secure communications.

Affected Version(s)

Secure Email Gateway 0 < 15.0.1

References

https://downloads.seppmail.com/extrelnotes/150/ERN15.0.ht...
release-notes

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Andris Suter-Dörig
Matteo Scarlata
Kenny Paterson
.