← Vulnerability feed

Vulnerability record · CVE-2026-2743 · published 5 March 2026

CVE-2026-2743: Seppmail path traversal vulnerability

Seppmail · Seppmail

Arbitrary File Write via Path Traversal upload to Remote Code Execution in SeppMail User Web Interface. The affected feature is the large file transfer (LFT). This issue affects SeppMail: 15.0.2.1 and before

10.0 CVSS 4.0 Critical EPSS 0.99% · top 38.9% CWE-22 · Path traversalCWE-434 · Unrestricted file upload
10.0CVSS 4.0 base score
0.99%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
3References
17 Jun 2026Last modified by NVD

Description

Arbitrary File Write via Path Traversal upload to Remote Code Execution in SeppMail User Web Interface. The affected feature is the large file transfer (LFT). This issue affects SeppMail: 15.0.2.1 and before

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://downloads.seppmail.com/extrelnotes/150/ERN15.0.html Release Notes
https://labs.infoguard.ch/posts/seppmail_secure_e-mail_gateway_rce_vulnerabilities_cve-2026-2743_cve-2026-7864_cve-2026-
https://labs.infoguard.ch/posts/seppmail_secure_e-mail_gateway_rce_vulnerabilities_cve-2026-2743_cve-2026-7864_cve-2026-

Track CVE-2026-2743 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.5CVE-2026-27441Seppmail os command injection vulnerabilitySEPPmail Secure Email Gateway before version 15.0.1 insufficiently neutralizes the PDF encryption password, allowing OS command execution.EPSS 0.55%9.3CVE-2026-27442Seppmail path traversal vulnerabilityThe GINA web interface in SEPPmail Secure Email Gateway before version 15.0.1 does not properly check attachment filenames in GINA-encrypted emails, …EPSS 0.46%8.8CVE-2022-41871Seppmail os command injection vulnerabilitySEPPmail through 12.1.17 allows command injection within the Admin Portal. An authenticated attacker is able to execute arbitrary code in the context…EPSS 1.1%8.2CVE-2026-27443Seppmail improper input validation vulnerabilitySEPPmail Secure Email Gateway before version 15.0.1 does not properly sanitize the headers from S/MIME protected MIME entities, allowing an attacker …EPSS 0.37%7.8CVE-2026-2748Seppmail improper certificate validation vulnerabilitySEPPmail Secure Email Gateway before version 15.0.1 improperly validates S/MIME certificates issued for email addresses containing whitespaces, allow…EPSS 0.19%7.8CVE-2026-27444Seppmail interpretation conflict vulnerabilitySEPPmail Secure Email Gateway before version 15.0.1 incorrectly interprets email addresses in the email headers, causing an interpretation conflict w…EPSS 0.37%6.9CVE-2026-2747Seppmail information exposure vulnerabilitySEPPmail Secure Email Gateway before version 15.0.1 decrypts inline PGP messages without isolating them from surrounding unencrypted content, allowin…EPSS 0.42%6.9CVE-2026-2746Seppmail improper verification of cryptographic signature vulnerabilitySEPPmail Secure Email Gateway before version 15.0.1 does not properly communicate PGP signature verification results, leaving users unable to detect …EPSS 0.19%

Source: NIST National Vulnerability Database (record CVE-2026-2743), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.