Vulnerability intelligence
CVE-2026-7864
SEPPmail Secure Email Gateway before version 15.0.4 exposes server environment variables through an unauthenticated endpoint in the new GINA UI, allowing remote attackers to obtain sensitive system information.
CVSS Score
6.9
Medium
EPSS — Exploit Probability
17%
Riskier than 97% of all CVEs · checked 2026-09-09
Exploitation
Not in CISA KEV
KEV does not include every exploited vulnerability
Remediation
unknown
Check vendor advisories
1 article across 1 outlet · first covered May 19, 2026 · latest May 19, 2026
Coverage timeline
-
SEPPMail Secure E-Mail Gateway Vulnerabilities Enable RCE and Mail Traffic Accessthehackernews.com · May 19, 2026