SEPPmail Secure Email Gateway
Moderate fix1 remedy
cpe:2.3:a:seppmail:seppmail:*:*:*:*:*:*:*
Moderate fix1 remedy
- < 15.0.4
SEPPmail Secure Email Gateway Unauthenticated Remote Code Execution Vulnerability via Insecure Deserialization
Vulnerability
Patched
A vulnerability allowing unauthenticated remote code execution has been identified in SEPPmail Secure Email Gateway versions prior to 15.0.4. This issue arises from the insecure deserialization of untrusted data, which can be accessed through the new GINA user interface.
Impact
Exploitation of this vulnerability allows for unauthenticated remote code execution on the server where SEPPmail Secure Email Gateway is running.
Remediation
Users can update to SEPPmail Secure Email Gateway version 15.0.4 or later to address this vulnerability.
Added: May 8, 2026, 2:45 PM
Updated: May 8, 2026, 2:45 PM
Vulnerability Rating
Custom Algorithm
spread
2.2impact
7.5exploitability
7.7remediation
7.7relevance
7.8threat
0.0urgency
2.9incentive
8.3Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.