CVE-2026-27443CWE-20
S/MIME Decryption Tag Sanitization Bypass
High · published March 4, 2026
What it is
SEPPmail Secure Email Gateway before version 15.0.1 does not properly sanitize the headers from S/MIME protected MIME entities, allowing an attacker to control trusted headers.
The record
Technical detail
- CVSS v4.0
- 8.2 · HIGH
- Vector
- CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:L/SA:N
- EPSS
- 0.00388 · 31.7th percentile
- Weakness
- CWE-20 · Improper Input Validation
- Published
- 2026-03-04T08:45Z
EPSS history
Timeline