PT-2026-29694 · Seppmail · Seppmail Secure Email Gateway

Andris Suter-Dörig + 2 · Published 2026-04-02 · Updated 2026-04-02 · CVE-2026-29133

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions SEPPmail Secure Email Gateway versions prior to 15.0.3

Description SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to upload PGP keys where the User ID (UID) does not correspond to the email address associated with the key. This could potentially lead to misuse of the email system.

Recommendations Update SEPPmail Secure Email Gateway to version 15.0.3 or later.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2026-29133

Affected Products

Seppmail Secure Email Gateway

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-29133 · Security Note
• https://downloads.seppmail.com/extrelnotes/150/ERN15.0.html#seppmail-vulnerability-disclosure-1503 · Note
• https://twitter.com/CVEnew/status/2039647700518613453 · Twitter Post