CVE-2026-44126criticalCWE-502

CVE-2026-44126: falha crítica em SEPPmail AG Secure Email Gateway

Insecure deserialization

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Secure Email Gateway

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

28Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 9.2epss 0.5%
SEPPmail Secure Email Gateway before version 15.0.4 insecurely deserializes untrusted data, which can be reached from the new GINA UI and may allow unauthenticated remote attackers to execute code via a crafted serialized object.
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Produtos afetados
SEPPmail AG · Secure Email Gateway
CVEs relacionadas — SEPPmail AG Secure Email Gateway

No mesmo produto, das mais perigosas para as menos.

CVE-2026-7864MEDIUMExposure of Sensitive Information to an Unauthorized ActorEPSS 16.1%CVE-2026-44127HIGHLocal File Inclusion (LFI) and Arbitrary File DeletionEPSS 14.8%CVE-2026-84830HIGHOS command injection in privileged configuration handlingEPSS 1.2%CVE-2026-44128CRITICALUnauthenticated Remote Code ExecutionEPSS 0.8%CVE-2026-44129HIGHServer-side template injectionEPSS 0.5%CVE-2026-44125CRITICALMissing Authorization in GINAv2EPSS 0.4%