PT-2026-29694

CVE-2026-29133

Published

2026-04-02

Updated

2026-04-02

Description by

CVSS 3.1

9.1

Critical

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions SEPPmail Secure Email Gateway versions prior to 15.0.3

Description SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to upload PGP keys where the User ID (UID) does not correspond to the email address associated with the key. This could potentially lead to misuse of the email system.

Recommendations Update SEPPmail Secure Email Gateway to version 15.0.3 or later.

Exploitability

Fix

Impacts

Researchers

Andris Suter-Dörig

Kenny Paterson

Matteo Scarlata

Vendors

Affected products

Weakness enumeration

CWE-20: Improper Input Validation