PT-2026-136902

CVE-2026-114426

·

Published

2026-11-04

·

Updated

2026-11-04

Description by

CVSS 4.0
8.7
High
MetricsAV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
SEPPmail Secure Email Gateway before 15.1.1 processes and writes v1 file-interface upload data before authenticating the caller and without an absolute request-size limit. An unauthenticated remote attacker can occupy workers and consume temporary storage with concurrent or slow requests, causing service unavailability.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-400: Uncontrolled Resource Consumption
Related identifiers
CVE-2026-114426
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com