LDAP Injection in Seppmail Secure Email Gateway

CVE-2026-29138

SEPPmail Secure Email Gateway before version 15.0.3 allows attackers with a specially crafted email address to claim another user's PGP signature as their own.

EPSS: 0.000 (13.7th percentile) — read the EPSS interpretation.

Affected products

Seppmail Secure Email Gateway — versions 0

Weakness classification (CWE)

CWE-90 — LDAP Injection

References

downloads.seppmail.com/extrelnotes/150/ERN15.0.html (release-notes)