CVE-2026-114425

LOWCVSS 9.2 · CRITICAL

Signal is active with 2 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

SEPPmail Secure Email Gateway before 15.1.1 trusts a file path supplied in externally provided Large File Transfer attachment metadata. An unauthenticated remote sender can cause the mail-processing worker to disclose, move, or delete an accessible regular file when LFT is enabled and the message reaches an affected secure-mail processing path. The validated workers ran as root.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

https://docs.seppmail.com/en/20_revision-history.html

Weakness type (CWE)

CWE-73

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

2 mentions across 1 observed day

What's happening

2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d

Referenced assets4 URLs

By indicator

Full discourse2 posts

cve.now@cvedotnow16h
🆕 New CVEs SEPPmail Secure Email Gateway: 2 critical CVEs Worst: root code execution in address replacement rules (CVE-2026-114424) Patch → 15.1.1 https://cve.now/CVE-2026-114424?release=CVE-2026-114425&utm_source=x&utm_medium=social&utm_campaign=cvedotnow&utm_content=rollup
10022843
21.6K followersView on X
Eliran Emuna@EmunaEliran16h
Running SEPPmail? Unauthenticated RCE as root, fixed in 15.1.1 CVE-2026-114424 (CVSS 4.0 9.2, CNA http://NCSC.ch): address rewrite rules can run sender text as Perl. CVE-2026-114425 (9.2) allows file read/delete. Exploitation not stated. https://www.cve.org/CVERecord?id=CVE-2026-114424 #CVE #EmailSecurity
0000032
77 followersView on X

Explore more

Back to dashboard