CVE-2026-114424 Details
Description
SEPPmail Secure Email Gateway before 15.1.1 can evaluate attacker-influenced replacement text as Perl code in sender or recipient replacement rules. An unauthenticated remote sender can execute operating-system commands in the mail-processing worker context when an active rule uses message-derived replacement data and its search condition matches. The validated worker context was root.
A command injection vulnerability has been identified in SEPPmail Secure Email Gateway versions prior to 15.1.1. The issue arises in the rule engine's processing of sender and recipient replacement rules, where attacker-controlled replacement text can be executed as Perl code. This vulnerability allows an unauthenticated remote sender to execute arbitrary operating system commands within the context of the mail-processing worker, which has root privileges. The exploitation occurs when an active rule utilizes message-derived replacement data that matches the search condition.
Users can update to SEPPmail Secure Email Gateway version 15.1.1 or later, where this vulnerability has been fixed.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Nov 4, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://docs.seppmail.com/en/20_revision-history.html | [email protected] | BundleRelease NotesVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-95 | Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| SEPPmail Secure Email Gateway | < 15.1.1 (semver) |
CPE
Remediation
| |
Change History
1 change record found show changes
| Date | Action | Recorded By |
|---|---|---|
| Nov 4, 2026 | New CVE Received | [email protected] |