PT-2026-38958 · Unknown · Seppmail Secure Email Gateway

Dario Weiss · Published 2026-05-08 · Updated 2026-05-09 · CVE-2026-44125

Positive Technologies (AI Summary)

CVSS v4.0

9.3

Critical

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions SEPPmail Secure Email Gateway versions prior to 15.0.4

Description The new GINA UI fails to enforce authorization checks for multiple endpoints. This allows unauthenticated remote attackers to access functionality that should require a valid session.

Recommendations Update to version 15.0.4 or later.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2026-44125

Affected Products

Seppmail Secure Email Gateway

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-44125 · Security Note
• https://labs.infoguard.ch/posts/seppmail_secure_e-mail_gateway_rce_vulnerabilities_cve-2026-2743_cve-2026-7864_cve-2026-44127_cve-2026-44128 · Note
• https://twitter.com/CVEnew/status/2053174617599058245 · Twitter Post
• https://downloads.seppmail.com/extrelnotes/150/ERN15.0.html#security · Note