PT-2026-38962 · Unknown · Seppmail Secure Email Gateway

Dario Weiss · Published 2026-05-08 · Updated 2026-05-09 · CVE-2026-7864

Positive Technologies (AI Summary)

CVSS v4.0

6.9

Medium

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions SEPPmail Secure Email Gateway versions prior to 15.0.4

Description An unauthenticated endpoint in the new GINA UI exposes server environment variables, which allows remote attackers to obtain sensitive system information.

Recommendations Update to version 15.0.4 or later.

Fix

Weakness Enumeration

CWE-497

Related Identifiers

CVE-2026-7864

Affected Products

Seppmail Secure Email Gateway

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-7864 · Security Note
• https://labs.infoguard.ch/posts/seppmail_secure_e-mail_gateway_rce_vulnerabilities_cve-2026-2743_cve-2026-7864_cve-2026-44127_cve-2026-44128 · Note
• https://twitter.com/CVEnew/status/2053174623194280064 · Twitter Post
• https://downloads.seppmail.com/extrelnotes/150/ERN15.0.html#security · Note