secure email gateway vulnerabilities and fixes

Recent CVEs affecting secure email gateway, with upgrade or downgrade steps. 14 tracked.

Also searched as: secureemailgateway.

secure email gateway has 14 tracked vulnerabilities, 3 critical. A fixed release or vendor patch exists for 14. Most recent: 2026-04-02. Highest priority: CVE-2026-29139 (score 44/100).

• CVE-2026-29139 CRITICAL 9.8 UPGRADE SEPPmail Secure Email Gateway before version 15.0.3 allows account takeover by abusing GINA account initializa
• CVE-2026-29143 CRITICAL 9.1 UPGRADE SEPPmail Secure Email Gateway before version 15.0.3 does not properly authenticate the inner message of S/MIME
• CVE-2026-29133 CRITICAL 9.1 UPGRADE SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to upload PGP keys with UIDs that do no
• CVE-2026-29131 HIGH 7.5 UPGRADE SEPPmail Secure Email Gateway before version 15.0.3 allows attackers with a specially crafted email address to
• CVE-2026-29132 HIGH 7.5 UPGRADE SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker with access to a victim's GINA account
• CVE-2026-29134 HIGH 7.5 UPGRADE SEPPmail Secure Email Gateway before version 15.0.3 allows an external user to modify GINA webdomain metadata
• CVE-2026-29135 HIGH 7.5 UPGRADE SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to craft a password-tag that bypasses s
• CVE-2026-29138 HIGH 7.5 UPGRADE SEPPmail Secure Email Gateway before version 15.0.3 allows attackers with a specially crafted email address to
• CVE-2026-29137 MEDIUM 5.3 UPGRADE SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to hide security tags from users by cra
• CVE-2026-29141 MEDIUM 5.3 UPGRADE SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to bypass subject sanitization and forg
• CVE-2026-29144 MEDIUM 5.3 UPGRADE SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to bypass subject sanitization and forg
• CVE-2026-29140 MEDIUM 5.3 UPGRADE SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to cause attacker-controlled certificat
• CVE-2026-29142 MEDIUM 5.3 UPGRADE SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to forge a GINA-encrypted email.
• CVE-2026-29136 MEDIUM 6.1 UPGRADE SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to inject HTML into notification emails

FAQ

How do I fix secure email gateway vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is secure email gateway being exploited right now?

None of the tracked secure email gateway CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which secure email gateway CVE should I patch first?

CVE-2026-29139 currently ranks highest (44/100): SEPPmail Secure Email Gateway before version 15.0.3 allows account takeover by abusing GINA account initializa.

RSS feed for secure email gateway · ← Back to latest CVEs