PT-2026-22890

CVE-2026-27444

Published

2026-03-04

Updated

2026-03-05

Description by

CVSS 4.0

7.8

High

MetricsAV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:L/SI:H/SA:N

Name of the Vulnerable Software and Affected Versions SEPPmail Secure Email Gateway versions prior to 15.0.1

Description SEPPmail Secure Email Gateway versions prior to 15.0.1 have an issue where the software incorrectly interprets email addresses within email headers. This misinterpretation can lead to conflicts with other mail infrastructure, potentially allowing an attacker to forge the email source or decrypt the email content.

Recommendations Update SEPPmail Secure Email Gateway to version 15.0.1 or later.

Exploitability

Fix

Researchers

Andris Suter-Dörig

Kenny Paterson

Matteo Scarlata

Vendors

Affected products

Weakness enumeration

CWE-436: Interpretation Conflict

Related identifiers