Skip to content
CVE PROGRAM SOURCE RECORD6.3 Medium

CVE-2026-29138

PGP Decryption Sender LDAP Injection

Description

SEPPmail Secure Email Gateway before version 15.0.3 allows attackers with a specially crafted email address to claim another user's PGP signature as their own.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SEPPmail Secure Email Gateway

Default version status: unaffected

  • 0 to < 15.0.3affected

References