CVE-2026-44127
HighSummary
SEPPmail Secure Email Gateway before version 15.0.4 contains an unauthenticated path traversal vulnerability in the identifier parameter of /api.app/attachment/preview that allows remote attackers to read arbitrary local files and trigger deletion of files in the targeted directory with the privileges of the api.app process.
Risk Assessment
This vulnerability may lead to the exposure of sensitive data and unauthorized deletion of files, posing a serious threat to the integrity and confidentiality of data within the organization.
Recommendation
It is recommended to update SEPPmail Secure Email Gateway to version 15.0.4 or later to mitigate this vulnerability and conduct a security audit of the system.
Other vulnerabilities in SEPPmail Secure Email Gateway
See all- CVE-2026-44129High
SEPPmail Secure Email Gateway before version 15.0.4 contains a server-side template injection vulnerability in the new GINA UI. An attacker can upload a controlled template, allowing for the execution of arbitrary template expressions and potentially achieving remote code execution depending on the enabled template plugins.
- CVE-2026-44128Critical
SEPPmail Secure Email Gateway before version 15.0.2.1 allows unauthenticated remote code execution in the new GINA UI because an endpoint passes attacker-controlled input from a parameter to Perl's eval.
- CVE-2026-44126Critical
SEPPmail Secure Email Gateway before version 15.0.4 insecurely deserializes untrusted data, which may allow unauthenticated remote attackers to execute code via a crafted serialized object.
- CVE-2026-44125Critical
SEPPmail Secure Email Gateway before version 15.0.4 fails to enforce authorization checks for multiple endpoints in the new GINA UI, allowing unauthenticated remote attackers to access functionality that should require a valid session.
- CVE-2026-9592High
A vulnerability in SEPPmail Secure Email Gateway and SEPPmail Cloud before version 15.0.4.2 allows an attacker to replay and hijack a user session in the GINA web portal. The session token is disclosed inside the URL and an HTTP header.
Original NVD description (English source)
SEPPmail Secure Email Gateway before version 15.0.4 contains an unauthenticated path traversal vulnerability in the identifier parameter of /api.app/attachment/preview that allows remote attackers to read arbitrary local files and trigger deletion of files in the targeted directory with the privileges of the api.app process.