Email Forgery Vulnerability in SEPPmail Secure Email Gateway

Publication date: 2026-04-02

Last updated on: 2026-04-16

Assigner: Switzerland Government Common Vulnerability Program

Description

SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to forge a GINA-encrypted email.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-04-02

Last Modified

2026-04-16

Generated

2026-07-06

AI Q&A

2026-04-02

EPSS Evaluated

2026-07-05

NVD

CVE-2026-29142

EUVD

EUVD-2026-18165

Affected Vendors & Products

Vendor	Product	Version / Range
seppmail	secure_email_gateway	to 15.0.3 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-325	The product does not implement a required step in a cryptographic algorithm, resulting in weaker encryption than advertised by the algorithm.

Attack-Flow Graph

Executive Summary

This vulnerability affects SEPPmail Secure Email Gateway versions before 15.0.3 and allows an attacker to forge a GINA-encrypted email.

Impact Analysis

An attacker exploiting this vulnerability could send forged GINA-encrypted emails, potentially misleading recipients and compromising the trustworthiness of email communications.

Hi! I’m here to help you understand CVE-2026-29142. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70