Skip to content
CVE PROGRAM SOURCE RECORD8.2 High

CVE-2026-27443

S/MIME Decryption Tag Sanitization Bypass

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
NCSC.ch

Description

SEPPmail Secure Email Gateway before version 15.0.1 does not properly sanitize the headers from S/MIME protected MIME entities, allowing an attacker to control trusted headers.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SEPPmail Secure Email Gateway

Default version status: unaffected

  • 0 to < 15.0.1affected

References