VULNERABILITY INTELLIGENCE
CVE-2026-7864
EPSS probability16.11%
CISA KEVNot currently listed
Published2026-05-08
Last modified2026-10-26
Description
SEPPmail Secure Email Gateway before version 15.0.4 exposes server environment variables through an unauthenticated endpoint in the new GINA UI, allowing remote attackers to obtain sensitive system information.
Weakness classification
- vulnerability@ncsc.ch: CWE-497