CVE-2026-2747

HIGH

SEPPmail Secure Email Gateway <15.0.1 - Info Disclosure

Title source: llm
STIX 2.1

Description

SEPPmail Secure Email Gateway before version 15.0.1 decrypts inline PGP messages without isolating them from surrounding unencrypted content, allowing exposure of sensitive information to an unauthorized actor.

References (1)

Core 1

Scores

CVSS v3 7.5
EPSS 0.0025
EPSS Percentile 16.1%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-200
Status published
Products (1)
seppmail/seppmail < 15.0.1
Published Mar 04, 2026
Tracked Since Mar 04, 2026