SEPPmail Secure Email Gateway Subject Tag Forging Vulnerability via Unicode Lookalikes

Vulnerability

A vulnerability in SEPPmail Secure Email Gateway versions prior to 15.0.3 allows attackers to bypass subject sanitization and forge security tags using Unicode lookalike characters. This issue could lead to misrepresentation or manipulation of email content or security attributes.

Impact

Exploitation of this vulnerability could result in unauthorized modification of email subject tags, potentially misleading recipients or email processing systems.

Remediation

Users can update to SEPPmail Secure Email Gateway version 15.0.3 or later, where this vulnerability has been fixed.

Added: Apr 2, 2026, 9:17 AM
Updated: Apr 2, 2026, 9:17 AM

Vulnerability Rating

Custom Algorithm
spread
2.2
impact
0.6
exploitability
7.6
remediation
7.7
relevance
5.1
threat
0.0
urgency
2.9
incentive
4.2

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.