CVE-2026-114426

UNKNOWN 0.0

Pre-authentication upload parsing permits resource exhaustion

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

SEPPmail Secure Email Gateway before 15.1.1 processes and writes v1 file-interface upload data before authenticating the caller and without an absolute request-size limit. An unauthenticated remote attacker can occupy workers and consume temporary storage with concurrent or slow requests, causing service unavailability.

CWE	CWE-400
Vendor	seppmail ag
Product	seppmail secure email gateway (seg)
Published	Nov 4, 2026

Stay Ahead of the Next One

Get instant alerts for seppmail ag seppmail secure email gateway (seg)

Be the first to know when new unknown vulnerabilities affecting seppmail ag seppmail secure email gateway (seg) are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

SEPPmail AG / SEPPmail Secure Email Gateway (SEG)

0 < 15.1.1

References

NVD ↗ CVE.org ↗ EPSS Data ↗

docs.seppmail.com: https://docs.seppmail.com/en/20_revision-history.html

Credits

Dario Weiss of InfoGuard Labs