DeutschShown in its original language — a full translation is planned for a future version.
SEPPmail Secure E-Mail Gateway: Mehrere Schwachstellen
view advisory published 2026-09-03
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in SEPPmail Secure E-Mail Gateway ausnutzen, um beliebige Kommandos auszuführen und um Sicherheitsmechanismen zu umgehen.
01
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-84832US | — | — | ||
SEPPmail Secure Email Gateway before 15.0.6 deserializes attacker-controlled data in a privileged REST import workflow without adequate validation. An attacker with a privileged AP… | ||||
| CVE-2026-84831US | —OT elevated | — | ||
SEPPmail Secure Email Gateway before 15.0.7 creates a fully privileged session before required multi-factor authentication enrollment is completed. An attacker with the password fo… | ||||
| CVE-2026-84830US | — | — | ||
SEPPmail Secure Email Gateway before 15.0.7 contains a command injection vulnerability that allows authenticated administrators to execute commands with elevated privileges. | ||||
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan