https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-29144.htmlhttps://patchthecve.com/cve/CVE-2026-29144.htmlMon, 26 Oct 2026 21:10:00 +0000MEDIUM 5.3: SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to bypass subject sanitization and forge security tags using Unicode lookalike characters.https://patchthecve.com/cve/CVE-2026-29143.htmlhttps://patchthecve.com/cve/CVE-2026-29143.htmlMon, 26 Oct 2026 21:10:00 +0000CRITICAL 9.1: SEPPmail Secure Email Gateway before version 15.0.3 does not properly authenticate the inner message of S/MIME-encrypted MIME entities, allowing an attacker to control trusted headers.https://patchthecve.com/cve/CVE-2026-29142.htmlhttps://patchthecve.com/cve/CVE-2026-29142.htmlMon, 26 Oct 2026 21:10:00 +0000MEDIUM 5.3: SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to forge a GINA-encrypted email.https://patchthecve.com/cve/CVE-2026-29141.htmlhttps://patchthecve.com/cve/CVE-2026-29141.htmlMon, 26 Oct 2026 21:10:00 +0000MEDIUM 5.3: SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to bypass subject sanitization and forge tags such as [signed OK].https://patchthecve.com/cve/CVE-2026-29140.htmlhttps://patchthecve.com/cve/CVE-2026-29140.htmlMon, 26 Oct 2026 21:10:00 +0000MEDIUM 5.3: SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to cause attacker-controlled certificates to be used for future encryption to a victim by adding the certificates to S/MIME signatures.https://patchthecve.com/cve/CVE-2026-29139.htmlhttps://patchthecve.com/cve/CVE-2026-29139.htmlMon, 26 Oct 2026 21:10:00 +0000CRITICAL 9.8: SEPPmail Secure Email Gateway before version 15.0.3 allows account takeover by abusing GINA account initialization to reset a victim account password.https://patchthecve.com/cve/CVE-2026-29138.htmlhttps://patchthecve.com/cve/CVE-2026-29138.htmlMon, 26 Oct 2026 21:10:00 +0000HIGH 7.5: SEPPmail Secure Email Gateway before version 15.0.3 allows attackers with a specially crafted email address to claim another user's PGP signature as their own.https://patchthecve.com/cve/CVE-2026-29137.htmlhttps://patchthecve.com/cve/CVE-2026-29137.htmlMon, 26 Oct 2026 21:10:00 +0000MEDIUM 5.3: SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to hide security tags from users by crafting a long subject.https://patchthecve.com/cve/CVE-2026-29136.htmlhttps://patchthecve.com/cve/CVE-2026-29136.htmlMon, 26 Oct 2026 21:10:00 +0000MEDIUM 6.1: SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to inject HTML into notification emails about new CA certificates.https://patchthecve.com/cve/CVE-2026-29135.htmlhttps://patchthecve.com/cve/CVE-2026-29135.htmlMon, 26 Oct 2026 21:10:00 +0000HIGH 7.5: SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to craft a password-tag that bypasses subject sanitization.https://patchthecve.com/cve/CVE-2026-29134.htmlhttps://patchthecve.com/cve/CVE-2026-29134.htmlMon, 26 Oct 2026 21:10:00 +0000HIGH 7.5: SEPPmail Secure Email Gateway before version 15.0.3 allows an external user to modify GINA webdomain metadata and bypass per-domain restrictions.https://patchthecve.com/cve/CVE-2026-29133.htmlhttps://patchthecve.com/cve/CVE-2026-29133.htmlMon, 26 Oct 2026 21:10:00 +0000CRITICAL 9.1: SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to upload PGP keys with UIDs that do not match their email address.https://patchthecve.com/cve/CVE-2026-29132.htmlhttps://patchthecve.com/cve/CVE-2026-29132.htmlMon, 26 Oct 2026 21:10:00 +0000HIGH 7.5: SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker with access to a victim's GINA account to bypass a second-password check and read protected emails.https://patchthecve.com/cve/CVE-2026-29131.htmlhttps://patchthecve.com/cve/CVE-2026-29131.htmlMon, 26 Oct 2026 21:10:00 +0000HIGH 7.5: SEPPmail Secure Email Gateway before version 15.0.3 allows attackers with a specially crafted email address to read the contents of emails encrypted for other users.