VULNERABILITY INTELLIGENCE
CVE-2026-44129
EPSS probability0.53%
CISA KEVNot currently listed
Published2026-05-08
Last modified2026-10-26
Description
SEPPmail Secure Email Gateway before version 15.0.4 contains a server-side template injection vulnerability in the new GINA UI because an endpoint accepts attacker-controlled template, allowing remote attackers to execute arbitrary template expressions and potentially achieve remote code execution depending on the enabled template plugins.
Weakness classification
- vulnerability@ncsc.ch: CWE-1336