Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2026-29143

S/MIME Decryption Impersonation

Description

SEPPmail Secure Email Gateway before version 15.0.3 does not properly authenticate the inner message of S/MIME-encrypted MIME entities, allowing an attacker to control trusted headers.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SEPPmail Secure Email Gateway

Default version status: unaffected

  • 0 to < 15.0.3affected

References