CVE-2026-27444

HIGH

SEPPmail Secure Email Gateway <15.0.1 - Auth Bypass

Title source: llm

Description

SEPPmail Secure Email Gateway before version 15.0.1 incorrectly interprets email addresses in the email headers, causing an interpretation conflict with other mail infrastructure that allows an attacker to fake the source of the email or decrypt it.

Scores

CVSS v3 7.5
EPSS 0.0003
EPSS Percentile 8.4%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Classification

CWE
CWE-436
Status published

Affected Products (1)

seppmail/seppmail < 15.0.1

Timeline

Published Mar 04, 2026
Tracked Since Mar 04, 2026