9.3 CriticalCWE-862
CVE-2026-44125
Missing Authorization in GINAv2
SEPPmail AGSecure Email Gateway
Status
- Not in CISA KEV
- Fixed in version 15.0.4
Exploit probabilityEPSSchecked 24 Oct
0.5%probability of exploitation in the next 30 days
Higher than 44% of scored CVEs
SeverityCVSS
9.3Critical
Description NVD
SEPPmail Secure Email Gateway before version 15.0.4 fails to enforce authorization checks for multiple endpoints in the new GINA UI, allowing unauthenticated remote attackers to access functionality that should require a valid session.
Coverage 1 article · 1 outlet
- SEPPMail Secure E-Mail Gateway Vulnerabilities Enable RCE and Mail Traffic AccessThe Hacker News · first in our coverage · mentions it in passing