CVE-2026-29136

SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to inject HTML into notification emails about new CA certificates.

Score

CVSS 3.1 6.1 Medium

Status

Analyzed - vulnerability@ncsc.ch

Published

2026-04-02

Last modified

2026-10-26

Weaknesses

CWE-79

Affected products

• Secure Email Gateway (Seppmail)
• Seppmail Secure Email Gateway (Seppmail)

References

• https://downloads.seppmail.com/extrelnotes/150/ERN15.0.html#seppmail-vulnerability-disclosure-1503