Skip to content
OpenAdvisories
High · 7.8 CVE-2026-27444 EUVD-2026-9380GHSA-5wwg-q432-32vv

Header Email Address Parsing

Published Mar 4, 2026 · Updated Mar 4, 2026 · Assigned by NCSC.ch

Description

SEPPmail Secure Email Gateway before version 15.0.1 incorrectly interprets email addresses in the email headers, causing an interpretation conflict with other mail infrastructure that allows an attacker to fake the source of the email or decrypt it.

Affected products

VendorProductAffectedFixed
SEPPmail Secure Email Gateway < 15.0.1 15.0.1

References