Multi-Factor Authentication Bypass in SEPPmail Secure Email Gateway

CVE-2026-84831

What is CVE-2026-84831?

The SEPPmail Secure Email Gateway prior to version 15.0.7 is vulnerable to multi-factor authentication bypass. This vulnerability arises when an account that requires multi-factor authentication (MFA) has not completed the enrollment process. An attacker possessing the password for such an account can establish a fully privileged session, gaining unauthorized access to protected features without the necessary second authentication factor, thereby compromising account security.

References