VULNERABILITY INTELLIGENCE
CVE-2026-44125
CVSS score9.3 CRITICAL
EPSS probability0.39%
CISA KEVNot currently listed
Published2026-05-08
Last modified2026-10-26
CVSS vectorCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Description
SEPPmail Secure Email Gateway before version 15.0.4 fails to enforce authorization checks for multiple endpoints in the new GINA UI, allowing unauthenticated remote attackers to access functionality that should require a valid session.
Weakness classification
- CWE-862: Missing Authorization