Vulnerability in Seppmail Secure Email Gateway

CVE-2026-29139

SEPPmail Secure Email Gateway before version 15.0.3 allows account takeover by abusing GINA account initialization to reset a victim account password.

EPSS: 0.001 (18.8th percentile) — read the EPSS interpretation.

Affected products

Seppmail Secure Email Gateway — versions 0

Weakness classification (CWE)

CWE-288 — Authentication Bypass Using an Alternate Path or Channel

References

downloads.seppmail.com/extrelnotes/150/ERN15.0.html (release-notes)