Description
SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to inject HTML into notification emails about new CA certificates.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SEPPmail | Secure Email Gateway | < 15.0.3 | 15.0.3 |
Medium · 5.3
CVE-2026-29136
EUVD-2026-18152
CA Notification HTML Injection
Published Apr 2, 2026 · Updated Apr 2, 2026 · Assigned by NCSC.ch