SEPPMail Secure E-Mail Gateway Vulnerabilities Enable RCE and Mail Traffic Access

Summary: InfoGuard Labs researchers Dario Weiss, Manuel Feifel, and Olivier Becker disclosed critical vulnerabilities in SEPPMail Secure E-Mail Gateway that could enable remote code execution and let an attacker read arbitrary mail from the virtual appliance. The researchers said a threat actor could exploit CVE-2026-2743 to overwrite /etc/syslog.conf using the "nobody" user's write access and obtain a Perl-based reverse shell, with log rotation forced by bloating SEPPMaillog past its 10,000 KB limit via web requests; CVE-2026-44128 was fixed in version 15.0.2.1, CVE-2026-44126 in 15.0.3, and the remaining flaws in 15.0.4.
What's compelling: The gateway sits directly in the mail path, so a successful exploit means an attacker reads all mail traffic and persists indefinitely on the appliance - and the disclosure follows a separate critical command-execution flaw, CVE-2026-27441, rated 9.5.

Read the original at The Hacker News ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2026-2743 CVE-2026-27441 CVE-2026-44126 CVE-2026-44128
Related: ⚡ Weekly Recap: Linux Flaws, Defender 0-Days, Router Botnets, and Supply Chain Chaos Cyber Risks ·
Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026