VULNERABILITY INTELLIGENCE
CVE-2026-2747
CVSS score7.5 HIGH
EPSS probability0.28%
CISA KEVNot currently listed
Published2026-03-04
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Description
SEPPmail Secure Email Gateway before version 15.0.1 decrypts inline PGP messages without isolating them from surrounding unencrypted content, allowing exposure of sensitive information to an unauthorized actor.
Weakness classification
- vulnerability@ncsc.ch: CWE-200
- nvd@nist.gov: NVD-CWE-noinfo
Primary references
- vulnerability@ncsc.ch — Vendor Advisory