CVE-2026-2747

HIGH

SEPPmail Secure Email Gateway <15.0.1 - Info Disclosure

Title source: llm
STIX 2.1

Description

SEPPmail Secure Email Gateway before version 15.0.1 decrypts inline PGP messages without isolating them from surrounding unencrypted content, allowing exposure of sensitive information to an unauthorized actor.

References (1)

Scores

CVSS v3 7.5
EPSS 0.0005
EPSS Percentile 14.2%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-200
Status published
Products (1)
seppmail/seppmail < 15.0.1
Published Mar 04, 2026
Tracked Since Mar 04, 2026