What’s Vulnerable › Vulnerabilities
CVE-2026-8811: Path traversal in PDF generation module
- Severity: high (CVSS 7.1 v4.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.3% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-06-18 · updated 2026-10-26
- Weakness: CWE-22
Description
SEPPmail versions before 15.0.5 allow improper handling of attachment filenames during encrypted PDF generation. An attacker can exploit this to create new files outside the intended directory, potentially placing files in web-accessible locations.
Affected products
- SEPPmail AG Secure Email Gateway: before 15.0.5 — fixed in 15.0.5
How to fix
Upgrade to a fixed version: SEPPmail AG Secure Email Gateway 15.0.5. Check the vendor advisory for mitigations.
References
Get alerted when CVE-2026-8811 or the next vulnerability affects your stack