CVE-2026-114425
Forged LFT metadata permits arbitrary file read and deletion
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
SEPPmail Secure Email Gateway before 15.1.1 trusts a file path supplied in externally provided Large File Transfer attachment metadata. An unauthenticated remote sender can cause the mail-processing worker to disclose, move, or delete an accessible regular file when LFT is enabled and the message reaches an affected secure-mail processing path. The validated workers ran as root.
| CWE | CWE-73 |
| Vendor | seppmail ag |
| Product | seppmail secure email gateway (seg) |
| Published | Nov 4, 2026 |
| Last Updated | Nov 4, 2026 |
Stay Ahead of the Next One
Get instant alerts for seppmail ag seppmail secure email gateway (seg)
Be the first to know when new unknown vulnerabilities affecting seppmail ag seppmail secure email gateway (seg) are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
SEPPmail AG / SEPPmail Secure Email Gateway (SEG)
0 < 15.1.1
References
Credits
Dario Weiss of InfoGuard Labs