CVE-2026-84831: Seppmail AG Seppmail Secure Email Gateway Seg

High severity, CVSS 7.7. EPSS: 0.5% chance of exploitation in the next 30 days.

SEPPmail Secure Email Gateway before 15.0.7 creates a fully privileged session before required multi-factor authentication enrollment is completed. An attacker with the password for an MFA-required but unenrolled account can access protected functionality without providing a second factor.

Affected products

• Seppmail AG Seppmail Secure Email Gateway Seg: before 15.0.7 (fixed in 15.0.7)

Published 2026-09-03. Last modified 2026-09-03.