{"id":"CVE-2026-8811","state":"PUBLISHED","title":"Path traversal in PDF generation module","description":"SEPPmail versions before 15.0.5 allow improper handling of attachment filenames during encrypted PDF generation. An attacker can exploit this to create new files outside the intended directory, potentially placing files in web-accessible locations.","publishedAt":"2026-06-18T09:05:46.285Z","updatedAt":"2026-06-18T12:14:45.784Z","severity":{"score":7.1,"label":"High","version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:H/SA:L","source":"NCSC.ch"},"assigner":"NCSC.ch","products":["SEPPmail AG Secure Email Gateway"],"affected":[{"vendor":"SEPPmail AG","product":"Secure Email Gateway","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"15.0.5","versionType":"custom"}]}],"references":["https://downloads.seppmail.com/extrelnotes/150/ERN15.0.html#possible-path-traversal-vulnerability"],"weaknesses":["CWE-22"],"ingestedAt":"2026-10-29T20:13:26.108Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/8xxx/CVE-2026-8811.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-8811","state":"PUBLISHED","datePublished":"2026-06-18T09:05:46.285Z","dateUpdated":"2026-06-18T12:14:45.784Z","assignerShortName":"NCSC.ch","assignerOrgId":"455daabc-a392-441d-aa46-37d35189897c","dateReserved":"2026-05-18T08:15:54.739Z"},"containers":{"cna":{"title":"Path traversal in PDF generation module","descriptions":[{"lang":"en","value":"SEPPmail versions before 15.0.5 allow improper handling of attachment filenames during encrypted PDF generation. An attacker can exploit this to create new files outside the intended directory, potentially placing files in web-accessible locations."}],"affected":[{"vendor":"SEPPmail AG","product":"Secure Email Gateway","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"15.0.5","versionType":"custom"}]}],"references":[{"url":"https://downloads.seppmail.com/extrelnotes/150/ERN15.0.html#possible-path-traversal-vulnerability"}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV4_0":{"attackVector":"NETWORK","attackComplexity":"LOW","attackRequirements":"PRESENT","privilegesRequired":"LOW","userInteraction":"NONE","vulnConfidentialityImpact":"NONE","subConfidentialityImpact":"NONE","vulnIntegrityImpact":"HIGH","subIntegrityImpact":"HIGH","vulnAvailabilityImpact":"LOW","subAvailabilityImpact":"LOW","exploitMaturity":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED","version":"4.0","baseSeverity":"HIGH","baseScore":7.1,"vectorString":"CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:H/SA:L"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-22","lang":"en","description":"CWE-22","type":"CWE"}]}],"providerMetadata":{"shortName":"NCSC.ch","orgId":"455daabc-a392-441d-aa46-37d35189897c","dateUpdated":"2026-06-18T09:05:46.285Z"},"impacts":[{"capecId":"CAPEC-126","descriptions":[{"lang":"en","value":"CAPEC-126 Path Traversal"}]}],"credits":[{"lang":"en","value":"Andris Suter-Dörig (ETH Zürich, Applied Crypto Group)","type":"finder"},{"lang":"en","value":"Olivier Becker (InfoGuard AG)","type":"finder"}],"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 1.0.2"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-06-18T12:09:49.487273Z","id":"CVE-2026-8811","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-06-18T12:14:45.784Z"}}]}}}