CVE-2026-29140

Name of the Vulnerable Software and Affected Versions SEPPmail Secure Email Gateway versions prior to 15.0.3

Description SEPPmail Secure Email Gateway versions before 15.0.3 are susceptible to a flaw that allows an attacker to manipulate S/MIME signatures, leading to the use of attacker-controlled certificates for future encryption with a victim. This is achieved by adding these certificates to S/MIME signatures.

Recommendations Update SEPPmail Secure Email Gateway to version 15.0.3 or later.