VULNERABILITY INTELLIGENCE
CVE-2026-84831
EPSS probability0.47%
CISA KEVNot currently listed
Published2026-09-03
Last modified2026-09-03
Description
SEPPmail Secure Email Gateway before 15.0.7 creates a fully privileged session before required multi-factor authentication enrollment is completed. An attacker with the password for an MFA-required but unenrolled account can access protected functionality without providing a second factor.
Weakness classification
- vulnerability@ncsc.ch: CWE-287