What is CVE-2026-27444?

CVE-2026-27444 is a high-severity vulnerability in Seppmail Secure Email Gateway, classified under CWE-436. CVSS score: 7.5/10. Published 2026-03-04.

How severe is CVE-2026-27444?

High severity. CVSS v3 base score is 7.5 out of 10.

Vulnerability in Seppmail Secure Email Gateway

CVE-2026-27444

SEPPmail Secure Email Gateway before version 15.0.1 incorrectly interprets email addresses in the email headers, causing an interpretation conflict with other mail infrastructure that allows an attacker to fake the source of the email or decrypt it.

EPSS: 0.002 (11.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N.

Affected products

Seppmail Secure Email Gateway — versions 0
Seppmail

Weakness classification (CWE)

CWE-436

References

vulnerability@ncsc.ch (release-notes, Vendor Advisory)

Frequently asked questions

What is CVE-2026-27444?: CVE-2026-27444 is a high-severity vulnerability in Seppmail Secure Email Gateway, classified under CWE-436. CVSS score: 7.5/10. Published 2026-03-04.
How severe is CVE-2026-27444?: High severity. CVSS v3 base score is 7.5 out of 10.