PT-2026-50652 · Seppmail · Seppmail

Andris Suter-Dörig + 1 · CVE-2026-8811 · Published 2026-06-18 · Updated 2026-06-18

Positive Technologies (AI Summary)

CVSS v4.0

7.1

High

Base vector

AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:H/SA:L

Name of the Vulnerable Software and Affected Versions SEPPmail versions prior to 15.0.5

Description Improper handling of attachment filenames during encrypted PDF generation allows an attacker to perform path traversal, which is a technique used to access files and directories that are stored outside the web root folder. This can result in the creation of new files outside the intended directory, potentially placing them in web-accessible locations.

Recommendations Update to version 15.0.5.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2026-8811

Affected Products

Seppmail

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-8811 · Security Note
• https://t.me/CVEtracker/57238 · Telegram Post
• https://downloads.seppmail.com/extrelnotes/150/ERN15.0.html#possible-path-traversal-vulnerability · Note