CVE-2026-8811

Name of the Vulnerable Software and Affected Versions SEPPmail versions prior to 15.0.5

Description Improper handling of attachment filenames during encrypted PDF generation allows an attacker to perform path traversal, which is a technique used to access files and directories that are stored outside the web root folder. This can result in the creation of new files outside the intended directory, potentially placing them in web-accessible locations.

Recommendations Update to version 15.0.5.