PT-2026-38959 · Unknown · Seppmail Secure Email Gateway

Dario Weiss · Published 2026-05-08 · Updated 2026-06-05 · CVE-2026-44127

Positive Technologies (AI Summary)

CVSS v4.0

8.8

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions SEPPmail Secure Email Gateway versions prior to 15.0.4

Description An unauthenticated path traversal issue exists in the '/api.app/attachment/preview' endpoint. This allows remote attackers to read arbitrary local files and trigger the deletion of files within the targeted directory using the privileges of the api.app process via the identifier parameter.

Recommendations Update to version 15.0.4 or later. As a temporary workaround, restrict access to the '/api.app/attachment/preview' endpoint or avoid using the identifier parameter until the update is applied.

Fix

Weakness Enumeration

CWE-73

Related Identifiers

CVE-2026-44127

Affected Products

Seppmail Secure Email Gateway

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2026-44127 · Security Note
• https://twitter.com/integ_sec/status/2062913519939469455 · Twitter Post
• https://twitter.com/CVEnew/status/2053174622237962547 · Twitter Post
• https://reddit.com/r/pwnhub/comments/1thlur8/seppmail_secure_email_gateway_faces_major · Reddit Post
• https://downloads.seppmail.com/extrelnotes/150/ERN15.0.html#security · Note
• https://labs.infoguard.ch/posts/seppmail_secure_e-mail_gateway_rce_vulnerabilities_cve-2026-2743_cve-2026-7864_cve-2026-44127_cve-2026-44128 · Note