# Seppmail Secure Email Gateway vulnerabilities Source: https://junglewise.ai/threats/technologies/seppmail-secure-email-gateway Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 12 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/seppmail-secure-email-gateway.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 19 vulnerabilities in Seppmail Secure Email Gateway: 0 in the last 7 days and 5 in the last 90 days, 3 of them critical and 0 exploited in the wild. The most recent, CVE-2026-114426, was published on 4 November 2026. 5 vulnerabilities in the last four weeks, up from none in the four before. ## Counts - Last 7 days: 0 - Last 30 days: 5 - Last 90 days: 5 - All time: 19 (3 critical, 0 exploited in the wild) ## About Seppmail Secure Email Gateway Seppmail Secure Email Gateway provides email encryption and security. ## Latest Seppmail Secure Email Gateway vulnerabilities - [CVE-2026-114426: SEPPmail Secure Email Gateway file-interface DoS before authentication](https://junglewise.ai/threats/cve-2026-114426-seppmail-secure-email-gateway-before-15-1-1-processes-and-writes) (info, published 4 Nov 2026) - [CVE-2026-114425: SEPPmail Secure Email Gateway arbitrary file access via LFT metadata](https://junglewise.ai/threats/cve-2026-114425-seppmail-secure-email-gateway-before-15-1-1-trusts-a-file-path) (info, published 4 Nov 2026) - [CVE-2026-114424: SEPPmail Secure Email Gateway code injection in address replacement rules](https://junglewise.ai/threats/cve-2026-114424-seppmail-secure-email-gateway-before-15-1-1-can-evaluate) (info, published 4 Nov 2026) - [CVE-2026-114421: SEPPmail Secure Email Gateway password recovery bypass in GINA](https://junglewise.ai/threats/cve-2026-114421-seppmail-secure-email-gateway-before-15-1-1-permits-password) (info, published 4 Nov 2026) - [CVE-2026-114420: SEPPmail Secure Email Gateway LDAP injection in account selection](https://junglewise.ai/threats/cve-2026-114420-seppmail-secure-email-gateway-before-15-1-1-does-not-neutralize) (info, published 4 Nov 2026) - [CVE-2026-29144: SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to bypass subject sanitization and forge…](https://junglewise.ai/threats/cve-2026-29144-seppmail-secure-email-gateway-before-version-15-0-3-allows-an) (medium, CVSS 5.3, published 2 Apr 2026) - [CVE-2026-29143: SEPPmail Secure Email Gateway before version 15.0.3 does not properly authenticate the inner message of…](https://junglewise.ai/threats/cve-2026-29143-seppmail-secure-email-gateway-before-version-15-0-3-does-not) (critical, CVSS 9.1, published 2 Apr 2026) - [CVE-2026-29142: SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to forge a GINA-encrypted email.](https://junglewise.ai/threats/cve-2026-29142-seppmail-secure-email-gateway-before-version-15-0-3-allows-an) (medium, CVSS 5.3, published 2 Apr 2026) - [CVE-2026-29141: SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to bypass subject sanitization and forge tags such…](https://junglewise.ai/threats/cve-2026-29141-seppmail-secure-email-gateway-before-version-15-0-3-allows-an) (medium, CVSS 5.3, published 2 Apr 2026) - [CVE-2026-29140: SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to cause attacker-controlled certificates to be…](https://junglewise.ai/threats/cve-2026-29140-seppmail-secure-email-gateway-before-version-15-0-3-allows-an) (medium, CVSS 5.3, published 2 Apr 2026) - [CVE-2026-29139: SEPPmail Secure Email Gateway before version 15.0.3 allows account takeover by abusing GINA account initialization to…](https://junglewise.ai/threats/cve-2026-29139-seppmail-secure-email-gateway-before-version-15-0-3-allows) (critical, CVSS 9.8, published 2 Apr 2026) - [CVE-2026-29138: SEPPmail Secure Email Gateway before version 15.0.3 allows attackers with a specially crafted email address to claim…](https://junglewise.ai/threats/cve-2026-29138-seppmail-secure-email-gateway-before-version-15-0-3-allows) (high, CVSS 7.5, published 2 Apr 2026) - [CVE-2026-29137: SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to hide security tags from users by crafting a long…](https://junglewise.ai/threats/cve-2026-29137-seppmail-secure-email-gateway-before-version-15-0-3-allows-an) (medium, CVSS 5.3, published 2 Apr 2026) - [CVE-2026-29136: SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to inject HTML into notification emails about new…](https://junglewise.ai/threats/cve-2026-29136-seppmail-secure-email-gateway-before-version-15-0-3-allows-an) (medium, CVSS 6.1, published 2 Apr 2026) - [CVE-2026-29135: SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to craft a password-tag that bypasses subject…](https://junglewise.ai/threats/cve-2026-29135-seppmail-secure-email-gateway-before-version-15-0-3-allows-an) (high, CVSS 7.5, published 2 Apr 2026) - [CVE-2026-29134: SEPPmail Secure Email Gateway before version 15.0.3 allows an external user to modify GINA webdomain metadata and…](https://junglewise.ai/threats/cve-2026-29134-seppmail-secure-email-gateway-before-version-15-0-3-allows-an) (high, CVSS 7.5, published 2 Apr 2026) - [CVE-2026-29133: SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to upload PGP keys with UIDs that do not match…](https://junglewise.ai/threats/cve-2026-29133-seppmail-secure-email-gateway-before-version-15-0-3-allows-an) (critical, CVSS 9.1, published 2 Apr 2026) - [CVE-2026-29132: SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker with access to a victim's GINA account to…](https://junglewise.ai/threats/cve-2026-29132-seppmail-secure-email-gateway-before-version-15-0-3-allows-an) (high, CVSS 7.5, published 2 Apr 2026) - [CVE-2026-29131: SEPPmail Secure Email Gateway before version 15.0.3 allows attackers with a specially crafted email address to read…](https://junglewise.ai/threats/cve-2026-29131-seppmail-secure-email-gateway-before-version-15-0-3-allows) (high, CVSS 7.5, published 2 Apr 2026) ## Most severe Seppmail Secure Email Gateway vulnerabilities - [CVE-2026-29139: SEPPmail Secure Email Gateway before version 15.0.3 allows account takeover by abusing GINA account initialization to…](https://junglewise.ai/threats/cve-2026-29139-seppmail-secure-email-gateway-before-version-15-0-3-allows) (critical, CVSS 9.8, published 2 Apr 2026) - [CVE-2026-29143: SEPPmail Secure Email Gateway before version 15.0.3 does not properly authenticate the inner message of…](https://junglewise.ai/threats/cve-2026-29143-seppmail-secure-email-gateway-before-version-15-0-3-does-not) (critical, CVSS 9.1, published 2 Apr 2026) - [CVE-2026-29133: SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to upload PGP keys with UIDs that do not match…](https://junglewise.ai/threats/cve-2026-29133-seppmail-secure-email-gateway-before-version-15-0-3-allows-an) (critical, CVSS 9.1, published 2 Apr 2026) - [CVE-2026-29135: SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to craft a password-tag that bypasses subject…](https://junglewise.ai/threats/cve-2026-29135-seppmail-secure-email-gateway-before-version-15-0-3-allows-an) (high, CVSS 7.5, published 2 Apr 2026) - [CVE-2026-29132: SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker with access to a victim's GINA account to…](https://junglewise.ai/threats/cve-2026-29132-seppmail-secure-email-gateway-before-version-15-0-3-allows-an) (high, CVSS 7.5, published 2 Apr 2026) - [CVE-2026-29134: SEPPmail Secure Email Gateway before version 15.0.3 allows an external user to modify GINA webdomain metadata and…](https://junglewise.ai/threats/cve-2026-29134-seppmail-secure-email-gateway-before-version-15-0-3-allows-an) (high, CVSS 7.5, published 2 Apr 2026) - [CVE-2026-29131: SEPPmail Secure Email Gateway before version 15.0.3 allows attackers with a specially crafted email address to read…](https://junglewise.ai/threats/cve-2026-29131-seppmail-secure-email-gateway-before-version-15-0-3-allows) (high, CVSS 7.5, published 2 Apr 2026) - [CVE-2026-29138: SEPPmail Secure Email Gateway before version 15.0.3 allows attackers with a specially crafted email address to claim…](https://junglewise.ai/threats/cve-2026-29138-seppmail-secure-email-gateway-before-version-15-0-3-allows) (high, CVSS 7.5, published 2 Apr 2026) - [CVE-2026-29136: SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to inject HTML into notification emails about new…](https://junglewise.ai/threats/cve-2026-29136-seppmail-secure-email-gateway-before-version-15-0-3-allows-an) (medium, CVSS 6.1, published 2 Apr 2026) - [CVE-2026-29144: SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to bypass subject sanitization and forge…](https://junglewise.ai/threats/cve-2026-29144-seppmail-secure-email-gateway-before-version-15-0-3-allows-an) (medium, CVSS 5.3, published 2 Apr 2026) ## Vulnerabilities per week 5 vulnerabilities in the last four weeks, up from none in the four before. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 5 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Seppmail Secure Email Gateway vulnerabilities", https://junglewise.ai/threats/technologies/seppmail-secure-email-gateway, 12 November 2026.