CVE-2026-27441CWE-78

PDF Password CMDi

Critical · published March 4, 2026

CVSS v4.0
9.5
EPSS
1%
Percentile
46.4
In the wild
Unconfirmed
What it is

SEPPmail Secure Email Gateway before version 15.0.1 insufficiently neutralizes the PDF encryption password, allowing OS command execution.

The record
Technical detail
CVSS v4.0
9.5 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:L
EPSS
0.00569 · 46.4th percentile
Weakness
CWE-78 · Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Published
2026-03-04T08:49Z
EPSS history
Timeline
  • 04 MAR 08:49Z
    PDF Password CMDi
    cvelistv5