{"id":"CVE-2026-27444","url":"https://www.cyber-defence.io/tools/cve/CVE-2026-27444","generatedAt":"2026-10-28T04:46:46.921Z","title":"SEPPmail Secure Email Gateway before version 15.0.1 incorrectly interprets email addresses in the email headers, causing an interpretation conflict with other mail infrastructure that allows an attacker to fake the source of the email or decrypt it.","description":"SEPPmail Secure Email Gateway before version 15.0.1 incorrectly interprets email addresses in the email headers, causing an interpretation conflict with other mail infrastructure that allows an attacker to fake the source of the email or decrypt it.","published":"2026-03-04T09:15:56.000Z","lastModified":"2026-06-17T10:27:10.000Z","status":"Analyzed","sourceIdentifier":"vulnerability@ncsc.ch","cvss":{"version":"4.0","score":7.8,"severity":"HIGH","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:L/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M"},"cwe":["CWE-436"],"affected":["seppmail/seppmail"],"epss":{"score":0.00226,"percentile":0.13245,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unlikely (0.23%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[],"references":[{"url":"https://downloads.seppmail.com/extrelnotes/150/ERN15.0.html#seppmail-vulnerability-disclosure","tags":["Vendor Advisory"],"source":"vulnerability@ncsc.ch"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-27444","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}