PT-2026-29703 · Seppmail · Seppmail Secure Email Gateway

Andris Suter-Dörig + 2 · Published 2026-04-02 · Updated 2026-04-02 · CVE-2026-29139

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SEPPmail Secure Email Gateway versions prior to 15.0.3

Description SEPPmail Secure Email Gateway versions prior to 15.0.3 are susceptible to account takeover. This is due to a flaw in the GINA account initialization process, which can be exploited to reset victim account passwords.

Recommendations Update SEPPmail Secure Email Gateway to version 15.0.3 or later.

Fix

Authentication Bypass Using an Alternate Path or Channel

Weakness Enumeration

CWE-288

Related Identifiers

CVE-2026-29139

Affected Products

Seppmail Secure Email Gateway

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-29139 · Security Note
• https://downloads.seppmail.com/extrelnotes/150/ERN15.0.html#seppmail-vulnerability-disclosure-1503 · Note
• https://twitter.com/CVEnew/status/2039647686509699077 · Twitter Post