CVE-2026-2747

6.9 mediumEPSS 0.3%

Medium (6.9) in seppmail seppmail. EPSS 0.3% chance of exploitation in the next 30 days.

SEPPmail Secure Email Gateway before version 15.0.1 decrypts inline PGP messages without isolating them from surrounding unencrypted content, allowing exposure of sensitive information to an unauthorized actor.

Severity

CVSS 4.0

6.9 medium

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:H/SI:N/SA:N

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 21% of CVEs (scores of 2026-10-31)
CWE: CWE-200
Published: 2026-03-04
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

seppmail:seppmail

References

https://downloads.seppmail.com/extrelnotes/150/ERN15.0.html#seppmail-vulnerability-disclosure

Check your stack JSON