Veille CVE

Recherche « SEPPmail AG SEPPmail Secure Email Gateway (SEG) »

2 CVE

Critique 0 Élevée 2 Moyenne 0 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « SEPPmail AG SEPPmail Secure Email Gateway (SEG) » ✕
  1. CVE-2026-84832 8.6 Élevée

    SEPPmail AG SEPPmail Secure Email Gateway (SEG)

    SEPPmail Secure Email Gateway before 15.0.6 deserializes attacker-controlled data in a privileged REST import workflow without adequate validation. An attacker with a privileged API token can execute arbitrary commands with "nobody" privileges.

  2. CVE-2026-84831 7.7 Élevée

    SEPPmail AG SEPPmail Secure Email Gateway (SEG)

    SEPPmail Secure Email Gateway before 15.0.7 creates a fully privileged session before required multi-factor authentication enrollment is completed. An attacker with the password for an MFA-required but unenrolled account can access protected functionality without providing a second factor.