CVE-2026-114424
Code execution through double evaluation in address replacement rules
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
SEPPmail Secure Email Gateway before 15.1.1 can evaluate attacker-influenced replacement text as Perl code in sender or recipient replacement rules. An unauthenticated remote sender can execute operating-system commands in the mail-processing worker context when an active rule uses message-derived replacement data and its search condition matches. The validated worker context was root.
| CWE | CWE-95 |
| Vendor | seppmail ag |
| Product | seppmail secure email gateway (seg) |
| Published | Nov 4, 2026 |
| Last Updated | Nov 4, 2026 |
Stay Ahead of the Next One
Get instant alerts for seppmail ag seppmail secure email gateway (seg)
Be the first to know when new unknown vulnerabilities affecting seppmail ag seppmail secure email gateway (seg) are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
SEPPmail AG / SEPPmail Secure Email Gateway (SEG)
0 < 15.1.1
References
Credits
Dario Weiss of InfoGuard Labs