CVE-2026-2747

HIGH

SEPPmail Secure Email Gateway <15.0.1 - Info Disclosure

Title source: llm

Description

SEPPmail Secure Email Gateway before version 15.0.1 decrypts inline PGP messages without isolating them from surrounding unencrypted content, allowing exposure of sensitive information to an unauthorized actor.

References (1)

[Various Sources] https://downloads.seppmail.com/extrelnotes/150/ERN15.0.html#seppmail-vulnerability-disclosure

Scores

CVSS v3 7.5

EPSS 0.0003

EPSS Percentile 9.1%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Classification

CWE

CWE-200

Status published

Affected Products (1)

seppmail/seppmail < 15.0.1

Timeline

Published Mar 04, 2026

Tracked Since Mar 04, 2026