Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
SEPPmail Secure Email Gateway before version 15.0.4 contains an unauthenticated path traversal vulnerability in the identifier parameter of /api.app/attachment/preview that allows remote attackers to read arbitrary local files and trigger deletion of files in the targeted directory with the privileges of the api.app process.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
CVE-2026-44127: SEPPmail Secure Email Gateway Path Traversal Bug - What It Means for Your Business and How to Respond https://hubs.li/Q04khb6B0
Post summary
The post announces the CVE-2026-44127 path traversal flaw in SEPPmail Secure Email Gateway, providing limited technical details but no evidence of exploit or mitigation steps.
CVE-2026-44127 SEPPmail Secure Email Gateway before version 15.0.4 contains an unauthenticated path traversal vulnerability in the identifier parameter of /api.app/attachment/previe… https://www.cve.org/CVERecord?id=CVE-2026-44127
Post summary
The text announces CVE-2026-44127, an unauthenticated path traversal vulnerability affecting SEPPmail Secure Email Gateway prior to version 15.0.4, and links to the official CVE record for details.