CVE-2026-27444CWE-436

Header Email Address Parsing

High · published March 4, 2026

CVSS v4.0
7.8
EPSS
0%
Percentile
31.7
In the wild
Unconfirmed
What it is

SEPPmail Secure Email Gateway before version 15.0.1 incorrectly interprets email addresses in the email headers, causing an interpretation conflict with other mail infrastructure that allows an attacker to fake the source of the email or decrypt it.

The record
Technical detail
CVSS v4.0
7.8 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:L/SI:H/SA:N
EPSS
0.00388 · 31.7th percentile
Weakness
CWE-436 · Interpretation Conflict
Published
2026-03-04T08:47Z
EPSS history
Timeline
  • 04 MAR 08:47Z
    Header Email Address Parsing
    cvelistv5