CVE-2026-8811: Seppmail AG Secure Email Gateway

High severity, CVSS 7.1. EPSS: 0.4% chance of exploitation in the next 30 days.

SEPPmail versions before 15.0.5 allow improper handling of attachment filenames during encrypted PDF generation. An attacker can exploit this to create new files outside the intended directory, potentially placing files in web-accessible locations.

Affected products

• Seppmail AG Secure Email Gateway: before 15.0.5 (fixed in 15.0.5)

Published 2026-06-18. Last modified 2026-06-22.