CVE-2026-7864 — Exposure of Sensitive Information to an Unauthorized Actor

CVE-2026-7864

Exposure of Sensitive Information to an Unauthorized Actor PUBLISHED

Description (CNA)

SEPPmail Secure Email Gateway before version 15.0.4 exposes server environment variables through an unauthenticated endpoint in the new GINA UI, allowing remote attackers to obtain sensitive system information.

Affected (CNA)

Vendor / product	Versions
SEPPmail AG / Secure Email Gateway	affected 0 before 15.0.4

CWE

CWE-497

References

https://downloads.seppmail.com/extrelnotes/150/ERN15.0.html#security
https://labs.infoguard.ch/posts/seppmail_secure_e-mail_gateway_rce_vulnerabilities_cve-2026-2743_cve-2026-7864_cve-2026-44127_cve-2026-44128/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.