Medium severityNVD Advisory· Published May 8, 2026· Updated May 18, 2026

CVE-2026-7864

Description

SEPPmail Secure Email Gateway before version 15.0.4 exposes server environment variables through an unauthenticated endpoint in the new GINA UI, allowing remote attackers to obtain sensitive system information.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Seppmail/Secure Email Gatewayllm-fuzzy
Range: <15.0.4

Patches

Vulnerability mechanics

References

downloads.seppmail.com/extrelnotes/150/ERN15.0.htmlnvd
labs.infoguard.ch/posts/seppmail_secure_e-mail_gateway_rce_vulnerabilities_cve-2026-2743_cve-2026-7864_cve-2026-44127_cve-2026-44128/nvd

News mentions

SEPPMail Secure E-Mail Gateway Vulnerabilities Enable RCE and Mail Traffic Access
The Hacker News · May 19, 2026

cvss	0.260
epss	0.014
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000