9.2 CriticalCWE-502
CVE-2026-44126
Insecure deserialization
SEPPmail AGSecure Email Gateway
Status
- Not in CISA KEV
- Fixed in version 15.0.4
Exploit probabilityEPSSchecked 25 Oct
0.5%probability of exploitation in the next 30 days
Higher than 41% of scored CVEs
SeverityCVSS
9.2Critical
Description NVD
SEPPmail Secure Email Gateway before version 15.0.4 insecurely deserializes untrusted data, which can be reached from the new GINA UI and may allow unauthenticated remote attackers to execute code via a crafted serialized object.
Coverage 1 article · 1 outlet
- SEPPMail Secure E-Mail Gateway Vulnerabilities Enable RCE and Mail Traffic AccessThe Hacker News · first in our coverage · mentions it in passing