Skip to content
CVE PROGRAM SOURCE RECORD7.7 High

CVE-2026-29140

S/MIME Signature Additional Certificate

Description

SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to cause attacker-controlled certificates to be used for future encryption to a victim by adding the certificates to S/MIME signatures.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SEPPmail Secure Email Gateway

Default version status: unaffected

  • 0 to < 15.0.3affected

References