CVE-2026-29134

SEPPmail Secure Email Gateway before version 15.0.3 allows an external user to modify GINA webdomain metadata and bypass per-domain restrictions.

Score

CVSS 3.1 7.5 High

Status

Analyzed - vulnerability@ncsc.ch

Published

2026-04-02

Last modified

2026-10-26

Weaknesses

CWE-807

Affected products

• Secure Email Gateway (Seppmail)
• Seppmail Secure Email Gateway (Seppmail)

References

• https://downloads.seppmail.com/extrelnotes/150/ERN15.0.html#seppmail-vulnerability-disclosure-1503