CVE-2026-27441

SEPPmail Secure Email Gateway before version 15.0.1 insufficiently neutralizes the PDF encryption password, allowing OS command execution.

Score

CVSS 3.1 9.8 Critical

Status

Analyzed - vulnerability@ncsc.ch

Published

2026-03-04

Last modified

2026-03-04

Weaknesses

CWE-78

Affected products

• Seppmail (Seppmail)
• Seppmail Secure Email Gateway (Seppmail)

References

• https://downloads.seppmail.com/extrelnotes/150/ERN15.0.html#seppmail-vulnerability-disclosure