CVE-2026-27445

SEPPmail Secure Email Gateway before version 15.0.1 does not properly verify that a PGP signature was generated by the expected key, allowing signature spoofing.

Score

CVSS 4.0 6.9 Medium

Status

Analyzed - vulnerability@ncsc.ch

Published

2026-03-04

Last modified

2026-03-04

Weaknesses

CWE-347

Affected products

• Seppmail (Seppmail)
• Seppmail Secure Email Gateway (Seppmail)

References

• https://downloads.seppmail.com/extrelnotes/150/ERN15.0.html#seppmail-vulnerability-disclosure