Vulnerability in Seppmail Secure Email Gateway
CVE-2026-2748
SEPPmail Secure Email Gateway before version 15.0.1 improperly validates S/MIME certificates issued for email addresses containing whitespaces, allowing signature spoofing.
Vulnerability class: Improper Certificate Validation
EPSS: 0.000 (7.5th percentile) — read the EPSS interpretation.
Affected products
- Seppmail Secure Email Gateway — versions 0
Weakness classification (CWE)
References
- downloads.seppmail.com/extrelnotes/150/ERN15.0.html (release-notes)