# CVE-2026-29134: SEPPmail Secure Email Gateway before version 15.0.3 allows an external user to modify GINA webdomain metadata and…

Source: https://junglewise.ai/threats/cve-2026-29134-seppmail-secure-email-gateway-before-version-15-0-3-allows-an  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-04-02  
License: CC BY 4.0 with a link back

CVE-2026-29134 · Severity: high · CVSS 7.5 · Published 2026-04-02

SEPPmail Secure Email Gateway before version 15.0.3 allows an external user to modify GINA webdomain metadata and bypass per-domain restrictions.

Technologies: [Seppmail Secure Email Gateway](https://junglewise.ai/threats/technologies/seppmail-secure-email-gateway). Vendors: [Seppmail](https://junglewise.ai/threats/vendors/seppmail).

## Quick answers

**Is CVE-2026-29134 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-29134 being exploited in the wild.

**How severe is CVE-2026-29134?** High severity, with a CVSS score of 7.5, published 2 April 2026.

**Which products and versions are affected?** Seppmail Secure Email Gateway. The advisory does not name versions.

**Is there a fix for CVE-2026-29134?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**Am I affected by CVE-2026-29134?** Check whether you run Seppmail Secure Email Gateway. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Affected products

- Seppmail Secure Email Gateway

## Related threats

- [SEPPmail Secure Email Gateway file-interface DoS before authentication](https://junglewise.ai/threats/cve-2026-114426-seppmail-secure-email-gateway-before-15-1-1-processes-and-writes)
- [SEPPmail Secure Email Gateway arbitrary file access via LFT metadata](https://junglewise.ai/threats/cve-2026-114425-seppmail-secure-email-gateway-before-15-1-1-trusts-a-file-path)
- [SEPPmail Secure Email Gateway code injection in address replacement rules](https://junglewise.ai/threats/cve-2026-114424-seppmail-secure-email-gateway-before-15-1-1-can-evaluate)
- [SEPPmail Secure Email Gateway password recovery bypass in GINA](https://junglewise.ai/threats/cve-2026-114421-seppmail-secure-email-gateway-before-15-1-1-permits-password)
- [SEPPmail Secure Email Gateway LDAP injection in account selection](https://junglewise.ai/threats/cve-2026-114420-seppmail-secure-email-gateway-before-15-1-1-does-not-neutralize)