Skip to content
OpenAdvisories
Medium · 6.9 CVE-2026-7864 EUVD-2026-28590GHSA-987g-rmgr-mpfx

Exposure of Sensitive Information to an Unauthorized Actor

Published May 8, 2026 · Updated May 18, 2026 · Assigned by NCSC.ch

Description

SEPPmail Secure Email Gateway before version 15.0.4 exposes server environment variables through an unauthenticated endpoint in the new GINA UI, allowing remote attackers to obtain sensitive system information.

Affected products

VendorProductAffectedFixed
SEPPmail Secure Email Gateway < 15.0.4 15.0.4

References