← Vulnerability feed

Vulnerability record · CVE-2026-27441 · published 4 March 2026

CVE-2026-27441: Seppmail os command injection vulnerability

Seppmail · Seppmail

SEPPmail Secure Email Gateway before version 15.0.1 insufficiently neutralizes the PDF encryption password, allowing OS command execution.

9.5 CVSS 4.0 Critical EPSS 0.55% · top 56.4% CWE-78 · OS command injection
9.5CVSS 4.0 base score
0.55%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
1References
17 Jun 2026Last modified by NVD

Description

SEPPmail Secure Email Gateway before version 15.0.1 insufficiently neutralizes the PDF encryption password, allowing OS command execution.

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://downloads.seppmail.com/extrelnotes/150/ERN15.0.html#seppmail-vulnerability-disclosure Vendor Advisory

Track CVE-2026-27441 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2026-2743Seppmail path traversal vulnerabilityArbitrary File Write via Path Traversal upload to Remote Code Execution in SeppMail User Web Interface. The affected feature is the large file transf…EPSS 0.99%9.3CVE-2026-27442Seppmail path traversal vulnerabilityThe GINA web interface in SEPPmail Secure Email Gateway before version 15.0.1 does not properly check attachment filenames in GINA-encrypted emails, …EPSS 0.46%8.8CVE-2022-41871Seppmail os command injection vulnerabilitySEPPmail through 12.1.17 allows command injection within the Admin Portal. An authenticated attacker is able to execute arbitrary code in the context…EPSS 1.1%8.2CVE-2026-27443Seppmail improper input validation vulnerabilitySEPPmail Secure Email Gateway before version 15.0.1 does not properly sanitize the headers from S/MIME protected MIME entities, allowing an attacker …EPSS 0.37%7.8CVE-2026-2748Seppmail improper certificate validation vulnerabilitySEPPmail Secure Email Gateway before version 15.0.1 improperly validates S/MIME certificates issued for email addresses containing whitespaces, allow…EPSS 0.19%7.8CVE-2026-27444Seppmail interpretation conflict vulnerabilitySEPPmail Secure Email Gateway before version 15.0.1 incorrectly interprets email addresses in the email headers, causing an interpretation conflict w…EPSS 0.37%6.9CVE-2026-2747Seppmail information exposure vulnerabilitySEPPmail Secure Email Gateway before version 15.0.1 decrypts inline PGP messages without isolating them from surrounding unencrypted content, allowin…EPSS 0.42%6.9CVE-2026-2746Seppmail improper verification of cryptographic signature vulnerabilitySEPPmail Secure Email Gateway before version 15.0.1 does not properly communicate PGP signature verification results, leaving users unable to detect …EPSS 0.19%

Source: NIST National Vulnerability Database (record CVE-2026-27441), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.