PT-2026-22891 · Seppmail · Seppmail Secure Email Gateway

Andris Suter-Dörig + 2 · Publicado 2026-03-04 · Atualizado 2026-03-05 · CVE-2026-27445

Positive Technologies (AI Summary)

CVSS v4.0

6.9

Média

Vetor base

AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:H/SA:N

Name of the Vulnerable Software and Affected Versions SEPPmail Secure Email Gateway versions prior to 15.0.1

Description The SEPPmail Secure Email Gateway does not correctly validate the origin of PGP signatures. This allows for signature spoofing, potentially enabling an attacker to forge signatures on email communications.

Recommendations Update to version 15.0.1 or later.

Correção

Improper Verification of Cryptographic Signature

Enumeração de Fraquezas

CWE-347

Identificadores relacionados

CVE-2026-27445

Produtos afetados

Seppmail Secure Email Gateway

Referências · 7

• https://osv.dev/vulnerability/CVE-2026-27445 · Aviso do Fabricante
• https://downloads.seppmail.com/extrelnotes/150/ERN15.0.html#seppmail-vulnerability-disclosure · Aviso do Fabricante
• https://t.me/CVEtracker/46298 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2026-27445 · Nota de Segurança
• https://twitter.com/infoflowcloud/status/2029127502455619602 · Publicação no Twitter
• https://t.me/cveNotify/154349 · Publicação no Telegram
• https://twitter.com/CVEnew/status/2029125970762903860 · Publicação no Twitter