CVE-2026-29138

UNKNOWN 0.0

PGP Decryption Sender LDAP Injection

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

15th

SEPPmail Secure Email Gateway before version 15.0.3 allows attackers with a specially crafted email address to claim another user's PGP signature as their own.

CWE	CWE-90
Vendor	seppmail
Product	secure email gateway
Published	Apr 2, 2026
Last Updated	Apr 2, 2026

Stay Ahead of the Next One

Get instant alerts for seppmail secure email gateway

Be the first to know when new unknown vulnerabilities affecting seppmail secure email gateway are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

SEPPmail / Secure Email Gateway

0 < 15.0.3

References

NVD ↗ CVE.org ↗ EPSS Data ↗

downloads.seppmail.com: https://downloads.seppmail.com/extrelnotes/150/ERN15.0.html#seppmail-vulnerability-disclosure-1503

Credits

Andris Suter-Dörig Matteo Scarlata Kenny Paterson