Critical severityNVD Advisory· Published May 8, 2026· Updated May 18, 2026

CVE-2026-44125

Description

SEPPmail Secure Email Gateway before version 15.0.4 fails to enforce authorization checks for multiple endpoints in the new GINA UI, allowing unauthenticated remote attackers to access functionality that should require a valid session.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Seppmail/Secure Email Gatewayllm-fuzzy
Range: <15.0.4

Patches

Vulnerability mechanics

References

downloads.seppmail.com/extrelnotes/150/ERN15.0.htmlnvd
labs.infoguard.ch/posts/seppmail_secure_e-mail_gateway_rce_vulnerabilities_cve-2026-2743_cve-2026-7864_cve-2026-44127_cve-2026-44128/nvd

News mentions

SEPPMail Secure E-Mail Gateway Vulnerabilities Enable RCE and Mail Traffic Access
The Hacker News · May 19, 2026

cvss	0.585
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000