6.9 MediumCWE-497
CVE-2026-7864
Exposure of Sensitive Information to an Unauthorized Actor
SEPPmail AGSecure Email Gateway
Status
- Not in CISA KEV
- Fixed in version 15.0.4
Exploit probabilityEPSSchecked 23 Oct
0.5%probability of exploitation in the next 30 days
Higher than 45% of scored CVEs
SeverityCVSS
6.9Medium
Description NVD
SEPPmail Secure Email Gateway before version 15.0.4 exposes server environment variables through an unauthenticated endpoint in the new GINA UI, allowing remote attackers to obtain sensitive system information.
Coverage 1 article · 1 outlet
- SEPPMail Secure E-Mail Gateway Vulnerabilities Enable RCE and Mail Traffic AccessThe Hacker News · first in our coverage · mentions it in passing