PT-2026-22894 · Seppmail · Seppmail Secure Email Gateway

Andris Suter-Dörig + 2 · Publicado 2026-03-04 · Atualizado 2026-03-04 · CVE-2026-2747

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions SEPPmail Secure Email Gateway versions prior to 15.0.1

Description The SEPPmail Secure Email Gateway decrypts inline PGP messages without properly isolating them from unencrypted content. This can lead to the exposure of sensitive information to unauthorized parties.

Recommendations Update to version 15.0.1 or later.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2026-2747

Produtos afetados

Seppmail Secure Email Gateway

Referências · 7

• https://nvd.nist.gov/vuln/detail/CVE-2026-2747 · Nota de Segurança
• https://twitter.com/infoflowcloud/status/2029127484755616240 · Publicação no Twitter
• https://twitter.com/CVEnew/status/2029125972436390300 · Publicação no Twitter
• https://downloads.seppmail.com/extrelnotes/150/ERN15.0.html#seppmail-vulnerability-disclosure · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2026-2747 · Aviso do Fabricante
• https://twitter.com/CVEarity/status/2029237504113881206 · Publicação no Twitter
• https://t.me/CVEtracker/46301 · Publicação no Telegram