XSS in Seppmail Secure Email Gateway

CVE-2026-29136

SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to inject HTML into notification emails about new CA certificates.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.000 (5.6th percentile) — read the EPSS interpretation.