High severityNVD Advisory· Published May 8, 2026· Updated May 18, 2026

CVE-2026-44129

Description

SEPPmail Secure Email Gateway before version 15.0.4 contains a server-side template injection vulnerability in the new GINA UI because an endpoint accepts attacker-controlled template, allowing remote attackers to execute arbitrary template expressions and potentially achieve remote code execution depending on the enabled template plugins.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Seppmail/Secure Email Gatewayllm-fuzzy
Range: <15.0.4

Patches

Vulnerability mechanics

References

downloads.seppmail.com/extrelnotes/150/ERN15.0.htmlnvd
labs.infoguard.ch/posts/seppmail_secure_e-mail_gateway_rce_vulnerabilities_cve-2026-2743_cve-2026-7864_cve-2026-44127_cve-2026-44128/nvd

News mentions

SEPPMail Secure E-Mail Gateway Vulnerabilities Enable RCE and Mail Traffic Access
The Hacker News · May 19, 2026

cvss	0.455
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000