Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2026-7864

Exposure of Sensitive Information to an Unauthorized Actor

Description

SEPPmail Secure Email Gateway before version 15.0.4 exposes server environment variables through an unauthenticated endpoint in the new GINA UI, allowing remote attackers to obtain sensitive system information.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SEPPmail AG Secure Email Gateway

Default version status: unaffected

  • 0 to < 15.0.4affected

References