Vendor
Seppmail vulnerabilities
Updated . Rebuilt every hour.
Junglewise Threat Intelligence has tracked 20 vulnerabilities in Seppmail: 0 in the last 7 days and 5 in the last 90 days, 4 of them critical and 0 exploited in the wild. The most recent, CVE-2026-114426, was published on 4 November 2026. 5 vulnerabilities in the last four weeks, up from none in the four before. 1 technology has a page of its own.
- Last 7 days
- 0
- Last 90 days
- 5
- Critical, all time
- 4
- Exploited in the wild
- 0
About Seppmail
Seppmail is a Swiss provider of secure email solutions, specializing in encryption and digital signatures.
Seppmail technologies
Latest Seppmail vulnerabilities
- CVE-2026-114426: SEPPmail Secure Email Gateway file-interface DoS before authenticationinfo
- CVE-2026-114425: SEPPmail Secure Email Gateway arbitrary file access via LFT metadatainfo
- CVE-2026-114424: SEPPmail Secure Email Gateway code injection in address replacement rulesinfo
- CVE-2026-114421: SEPPmail Secure Email Gateway password recovery bypass in GINAinfo
- CVE-2026-114420: SEPPmail Secure Email Gateway LDAP injection in account selectioninfo
- CVE-2026-29144: SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to bypass subject sanitization and forge…mediumCVSS 5.3EPSS 0.2%
- CVE-2026-29143: SEPPmail Secure Email Gateway before version 15.0.3 does not properly authenticate the inner message of…criticalCVSS 9.1EPSS 0.3%
- CVE-2026-29142: SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to forge a GINA-encrypted email.mediumCVSS 5.3EPSS 0.1%
- CVE-2026-29141: SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to bypass subject sanitization and forge tags such…mediumCVSS 5.3EPSS 0.2%
- CVE-2026-29140: SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to cause attacker-controlled certificates to be…mediumCVSS 5.3EPSS 0.1%
- CVE-2026-29139: SEPPmail Secure Email Gateway before version 15.0.3 allows account takeover by abusing GINA account initialization to…criticalCVSS 9.8EPSS 0.3%
- CVE-2026-29138: SEPPmail Secure Email Gateway before version 15.0.3 allows attackers with a specially crafted email address to claim…highCVSS 7.5EPSS 0.2%
- CVE-2026-29137: SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to hide security tags from users by crafting a long…mediumCVSS 5.3EPSS 0.2%
- CVE-2026-29136: SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to inject HTML into notification emails about new…mediumCVSS 6.1EPSS 0.1%
- CVE-2026-29135: SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to craft a password-tag that bypasses subject…highCVSS 7.5EPSS 0.3%
- CVE-2026-29134: SEPPmail Secure Email Gateway before version 15.0.3 allows an external user to modify GINA webdomain metadata and…highCVSS 7.5EPSS 0.2%
- CVE-2026-29133: SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to upload PGP keys with UIDs that do not match…criticalCVSS 9.1EPSS 0.2%
- CVE-2026-29132: SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker with access to a victim's GINA account to…highCVSS 7.5EPSS 0.3%
- CVE-2026-29131: SEPPmail Secure Email Gateway before version 15.0.3 allows attackers with a specially crafted email address to read…highCVSS 7.5EPSS 0.2%
- CVE-2026-2743: SeppMail Secure E-Mail Gateway RCE via path traversal in LFTcriticalCVSS 9.8EPSS 0.6%
Most severe Seppmail vulnerabilities
Exploited in the wild first, then by severity and CVSS score.
- CVE-2026-2743: SeppMail Secure E-Mail Gateway RCE via path traversal in LFTcriticalCVSS 9.8EPSS 0.6%
- CVE-2026-29139: SEPPmail Secure Email Gateway before version 15.0.3 allows account takeover by abusing GINA account initialization to…criticalCVSS 9.8EPSS 0.3%
- CVE-2026-29143: SEPPmail Secure Email Gateway before version 15.0.3 does not properly authenticate the inner message of…criticalCVSS 9.1EPSS 0.3%
- CVE-2026-29133: SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to upload PGP keys with UIDs that do not match…criticalCVSS 9.1EPSS 0.2%
- CVE-2026-29135: SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to craft a password-tag that bypasses subject…highCVSS 7.5EPSS 0.3%
- CVE-2026-29132: SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker with access to a victim's GINA account to…highCVSS 7.5EPSS 0.3%
- CVE-2026-29134: SEPPmail Secure Email Gateway before version 15.0.3 allows an external user to modify GINA webdomain metadata and…highCVSS 7.5EPSS 0.2%
- CVE-2026-29131: SEPPmail Secure Email Gateway before version 15.0.3 allows attackers with a specially crafted email address to read…highCVSS 7.5EPSS 0.2%
- CVE-2026-29138: SEPPmail Secure Email Gateway before version 15.0.3 allows attackers with a specially crafted email address to claim…highCVSS 7.5EPSS 0.2%
- CVE-2026-29136: SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to inject HTML into notification emails about new…mediumCVSS 6.1EPSS 0.1%
Vulnerabilities per week
5 vulnerabilities in the last four weeks, up from none in the four before. The last 13 weeks, by the week each vulnerability was published.
| Week of | Bar | Vulns | Critical |
|---|---|---|---|
| 17 Aug 2026 | 0 | 0 | |
| 24 Aug 2026 | 0 | 0 | |
| 31 Aug 2026 | 0 | 0 | |
| 7 Sep 2026 | 0 | 0 | |
| 14 Sep 2026 | 0 | 0 | |
| 21 Sep 2026 | 0 | 0 | |
| 28 Sep 2026 | 0 | 0 | |
| 5 Oct 2026 | 0 | 0 | |
| 12 Oct 2026 | 0 | 0 | |
| 19 Oct 2026 | 0 | 0 | |
| 26 Oct 2026 | 0 | 0 | |
| 2 Nov 2026 | 5 | 0 | |
| 9 Nov 2026 | 0 | 0 |
Embed a badge
A live badge for a README, a status page or an internal wiki: how many Seppmail vulnerabilities were published in the last 7 days and how many of them are critical, refreshed hourly.
[](https://junglewise.ai/threats/vendors/seppmail)<a href="https://junglewise.ai/threats/vendors/seppmail"><img src="https://junglewise.ai/threats/vendors/seppmail/badge.svg" alt="Seppmail vulnerabilities" /></a>How this is built
Junglewise Threat Intelligence collects vulnerabilities from NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories, and matches each one to the technologies and vendors it affects. Dates are the date a vulnerability was published, in UTC.
The pages are rebuilt from the database every hour. Frozen weekly and monthly reports never change once published, so they can be cited.
Use this data
The same data is at https://junglewise.ai/threats/vendors/seppmail.json, and this page as text at https://junglewise.ai/threats/vendors/seppmail.md, for scripts and language models. It is free to reuse under CC BY 4.0 with a link back to this page.
Cite as: Junglewise Threat Intelligence, "Seppmail vulnerabilities", https://junglewise.ai/threats/vendors/seppmail, 12 November 2026.