CVE-2026-8811 — Path traversal in PDF generation module

CVE-2026-8811

Path traversal in PDF generation module PUBLISHED

Description (CNA)

SEPPmail versions before 15.0.5 allow improper handling of attachment filenames during encrypted PDF generation. An attacker can exploit this to create new files outside the intended directory, potentially placing files in web-accessible locations.

Affected (CNA)

Vendor / product	Versions
SEPPmail AG / Secure Email Gateway	affected 0 before 15.0.5

CWE

CWE-22

References

https://downloads.seppmail.com/extrelnotes/150/ERN15.0.html#possible-path-traversal-vulnerability

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.