PT-2026-50652 · Seppmail Ag · Secure Email Gateway

Andris Suter-Dörig + 1 · Publicado 2026-06-18 · Atualizado 2026-06-18 · CVE-2026-8811

Mitre

CVSS v4.0

7.1

Alta

Vetor base

AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:H/SA:L

SEPPmail versions before 15.0.5 allow improper handling of attachment filenames during encrypted PDF generation. An attacker can exploit this to create new files outside the intended directory, potentially placing files in web-accessible locations.

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2026-8811

Produtos afetados

Secure Email Gateway

Referências · 1

• https://downloads.seppmail.com/extrelnotes/150/ERN15.0.html#possible-path-traversal-vulnerability · Nota