Seppmail vulnerabilities
40 CVEs and advisories name Seppmail as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-114421Empty initial password permits GINA account takeover
- CVE-2026-114420LDAP wildcard injection exposes GINA recipient accounts
- CVE-2026-114426Pre-authentication upload parsing permits resource exhaustion
- CVE-2026-114425Forged LFT metadata permits arbitrary file read and deletion
- CVE-2026-114424Code execution through double evaluation in address replacement rules
- CVE-2026-84830OS command injection in privileged configuration handling
- CVE-2026-84832Unsafe deserialization in the REST interface
- CVE-2026-84831Mandatory MFA bypass before enrollment
- CVE-2026-9592Sensitive Information Disclosure in HTTP header
- CVE-2026-8811Path traversal in PDF generation module
- CVE-2026-44126Insecure deserialization
- CVE-2026-44125Missing Authorization in GINAv2
- CVE-2026-44129Server-side template injection
- CVE-2026-44128Unauthenticated Remote Code Execution
- CVE-2026-44127Local File Inclusion (LFI) and Arbitrary File Deletion
- CVE-2026-7864Exposure of Sensitive Information to an Unauthorized Actor
- CVE-2026-29136CA Notification HTML Injection
- CVE-2026-29139GINA State Confusion Account Takeover
- CVE-2026-29144Unicode Subject Tags
- CVE-2026-29143S/MIME Decryption Impersonation
- CVE-2026-29138PGP Decryption Sender LDAP Injection
- CVE-2026-29131PGP Decryption Recipient LDAP Injection
- CVE-2026-29142Plaintext secure-mail.html
- CVE-2026-29137Long Subject Untagging
- CVE-2026-29141Bounded Subject Tag Sanitization
- CVE-2026-29135Webmail Password Tag Sanitization Bypass
- CVE-2026-29134GINA Domain Switch
- CVE-2026-29140S/MIME Signature Additional Certificate
- CVE-2026-29133UID Regex Bypass
- CVE-2026-29132ESWmail-Verify Bypass