Critical severityNVD Advisory· Published May 8, 2026· Updated May 18, 2026

CVE-2026-44128

Description

SEPPmail Secure Email Gateway before version 15.0.2.1 allows unauthenticated remote code execution in the new GINA UI because an endpoint passes attacker-controlled input from a parameter to Perl's eval.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Seppmail/Secure Email Gatewayllm-fuzzy
Range: <15.0.2.1

Patches

Vulnerability mechanics

References

downloads.seppmail.com/extrelnotes/150/ERN15.0.htmlnvd
labs.infoguard.ch/posts/seppmail_secure_e-mail_gateway_rce_vulnerabilities_cve-2026-2743_cve-2026-7864_cve-2026-44127_cve-2026-44128/nvd

News mentions

SEPPMail Secure E-Mail Gateway Vulnerabilities Enable RCE and Mail Traffic Access
The Hacker News · May 19, 2026

cvss	0.585
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000