Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
SEPPmail Secure Email Gateway before version 15.0.1 insufficiently neutralizes the PDF encryption password, allowing OS command execution.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-03-04 | 3 | Disclosure3 |
| 2026-03-05 | 1 | Disclosure1 |
| 2026-03-06 | 1 | Disclosure1 |
Warning: Critical vulnerabilities in #SEPPmail Secure Email Gateway (CVE-2026-27441 CVSS: 9.5; CVE-2026-27442 CVSS: 9.3), that may allow OS command execution. #Patch #Patch #Patch
Post summary
The post announces two critical CVEs affecting SEPPmail Secure Email Gateway that enable OS command execution, highlighting the urgency for users to seek patches.
🚨🚨🚨 PDF Password CMDi (CVE-2026-27441) zip attachments path traversal (CVE-2026-27442) SEPPmail Vulnerability Disclosure https://downloads.seppmail.com/extrelnotes/150/ERN15.0.html#seppmail-vulnerability-disclosure
Post summary
The post announces new CVE disclosures (CVE-2026-27441 and CVE-2026-27442) for SEPPmail, describing them as a PDF password command injection and zip path traversal, with a link to vendor release notes. No PoC, exploit, or patch details are provided, and no active exploitation is reported.
⚡ New CVE Alert: CVE-2026-27441 📊 Severity: 9.5 🚨 Risk Level: Critical 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-27441 #CVE-2026-27441 #CVE #Critical #CyberSecurity #InfoSec https://t.co/sK0sAF7D2h
Post summary
A new CVE (CVE-2026-27441) is announced with a 9.5 severity score and critical risk level, but no further technical particulars or remediation steps are provided.
🚨*CVE* CVE-2026-27441 SEPPmail Secure Email Gateway before version 15.0.1 insufficiently neutralizes the PDF encryption password, allowing OS command execution. https://www.cve.org/CVERecord?id=CVE-2026-27441 ----- Traducción: CVE-2026-27441 SEPPmail Secure Email Gateway ant… http://infoflow.cloud`
Post summary
The post announces CVE‑2026‑27441, describing an OS command execution flaw in SEPPmail Secure Email Gateway caused by improper handling of PDF encryption passwords, without mentioning PoCs, exploits, patches, or active exploitation.
CVE-2026-27441 SEPPmail Secure Email Gateway before version 15.0.1 insufficiently neutralizes the PDF encryption password, allowing OS command execution. https://www.cve.org/CVERecord?id=CVE-2026-27441
Post summary
The CVE-2026-27441 identifies a flaw in SEPPmail Secure Email Gateway that permits OS command execution through mishandled PDF encryption passwords.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | seppmail | seppmail | - | - | - |