CVE-2026-8811
Path traversal in PDF generation module
SEPPmail versions before 15.0.5 allow improper handling of attachment filenames during encrypted PDF generation. An attacker can exploit this to create new files outside the intended directory, potentially placing files in web-accessible locations.
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:H/SA:L
Productos afectados
SEPPmail AG · Secure Email Gateway¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →