CVE-2026-29144CWE-20

Unicode Subject Tags

High · published April 2, 2026

CVSS v4.0
7.8
EPSS
0%
Percentile
27.0
In the wild
Unconfirmed
What it is

SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to bypass subject sanitization and forge security tags using Unicode lookalike characters.

The record
Technical detail
CVSS v4.0
7.8 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:L/SI:H/SA:N
EPSS
0.00347 · 27.0th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2026-04-02T08:50Z
EPSS history
Timeline
  • 02 APR 08:50Z
    Unicode Subject Tags
    cvelistv5