CVE-2026-29134
Metadata Modification Vulnerability in SEPPmail Gateway Enables Bypass
Publication date: 2026-04-02
Last updated on: 2026-04-16
Assigner: Switzerland Government Common Vulnerability Program
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| seppmail | secure_email_gateway | to 15.0.3 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-807 | The product uses a protection mechanism that relies on the existence or values of an input, but the input can be modified by an untrusted actor in a way that bypasses the protection mechanism. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability affects SEPPmail Secure Email Gateway versions before 15.0.3. It allows an external user to modify the GINA webdomain metadata, which in turn enables them to bypass restrictions that are set on a per-domain basis.
How can this vulnerability impact me? :
By exploiting this vulnerability, an external attacker could alter domain-specific metadata and bypass domain restrictions. This could potentially allow unauthorized access or actions that are normally restricted by domain policies, leading to security breaches or misuse of the email gateway.