en
SEPPmail AG is a Swiss software company that develops and distributes secure email communication solutions. Its primary technical area is email security, including encryption, signing, secure large-file exchange, and related communication controls. It is an internationally operating vendor with business activity in Switzerland and Germany.
As of 11/08/2026, SEPPmail AG recorded 5 security vulnerabilities in the last 90 days across 1 products, including 4 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, SEPPmail Secure Email Gateway (SEG) had the most security vulnerabilities in the SEPPmail AG ecosystem, with 5 vulnerabilities—approximately 100% of the provider's total vulnerabilities during this period.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2026-114426Pre-authentication upload parsing permits resource exhaustionCVE-2026-114425Forged LFT metadata permits arbitrary file read and deletionCVE-2026-114424Code execution through double evaluation in address replacement rulesCVE-2026-114421Empty initial password permits GINA account takeoverCVE-2026-114420LDAP wildcard injection exposes GINA recipient accounts| Vulnerability | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2026-114426Pre-authentication upload parsing permits resource exhaustion | Exploitation statusNot confirmed | FixYes | Affected productSEPPmail Secure Email Gateway (SEG) | Published11/04/2026 | SeverityHigh |
CVE-2026-114425Forged LFT metadata permits arbitrary file read and deletion | Exploitation statusNot confirmed | FixYes | Affected productSEPPmail Secure Email Gateway (SEG) | Published | |
CVE-2026-114424Code execution through double evaluation in address replacement rules | Exploitation statusNot confirmed | FixYes | Affected productSEPPmail Secure Email Gateway (SEG) | Published | |
CVE-2026-114421Empty initial password permits GINA account takeover | Exploitation statusNot confirmed | FixYes | Affected productSEPPmail Secure Email Gateway (SEG) | Published | |
CVE-2026-114420LDAP wildcard injection exposes GINA recipient accounts | Exploitation statusNot confirmed | FixYes | Affected productSEPPmail Secure Email Gateway (SEG) | Published |
5 Results | Page 1 of 1
| SeverityCritical |
| SeverityCritical |
| SeverityHigh |
| SeverityMedium |