SEPPmail GmbH (Gateway documentation revision history)

seppmail-gateway-revision-history · A · candidate

https://docs.seppmail.com/en/20_revision-history.html

vendor-psirtlang: enfetch failures: 0quiet periods: 0last fetch: 2026-11-05

Added 2026-11-05 (S1): first-party, dated per-CVE security section for the Swiss mail-encryption gateway (NCSC.ch is the CNA); it carried the 15.1.1 CVEs with affected and fixed versions the day they shipped and reads with extract. The page lists scores in a shared description, so take scores and vectors from the CNA text via the ENISA EUVD pages. Candidate: promote to active after 3 contributing runs.

Cited in 1 entry

Citation cadence

Citation days per ISO week (1 weeks of coverage span, total 1).

CVE-2026-114424 and CVE-2026-114425, SEPPmail Secure Email Gateway before 15.1.1: an unauthenticated mail sender can reach root command execution through a replacement rule and root file access through Large File Transfer, with three more flaws fixed in the same release and no fix for the 15.0 branch (CVSS 4.0 9.2)2026-11-05