LDAP Injection in Seppmail Secure Email Gateway

CVE-2026-29131

SEPPmail Secure Email Gateway before version 15.0.3 allows attackers with a specially crafted email address to read the contents of emails encrypted for other users.

EPSS: 0.000 (13.0th percentile) — read the EPSS interpretation.

Affected products

Seppmail Secure Email Gateway — versions 0

Weakness classification (CWE)

CWE-90 — LDAP Injection

References

downloads.seppmail.com/extrelnotes/150/ERN15.0.html (release-notes)