9.3 CriticalCWE-95
CVE-2026-44128
Unauthenticated Remote Code Execution
SEPPmail AGSecure Email Gateway
Status
- Not in CISA KEV
- Fixed in version 15.0.2.1
Exploit probabilityEPSSchecked 24 Oct
0.7%probability of exploitation in the next 30 days
Higher than 54% of scored CVEs
SeverityCVSS
9.3Critical
Description NVD
SEPPmail Secure Email Gateway before version 15.0.2.1 allows unauthenticated remote code execution in the new GINA UI because an endpoint passes attacker-controlled input from a parameter to Perl's eval.
Coverage 1 article · 1 outlet
- SEPPMail Secure E-Mail Gateway Vulnerabilities Enable RCE and Mail Traffic AccessThe Hacker News · first in our coverage · mentions it in passing