CVE-2026-114426
High
Description
SEPPmail Secure Email Gateway before 15.1.1 processes and writes v1 file-interface upload data before authenticating the caller and without an absolute request-size limit. An unauthenticated remote attacker can occupy workers and consume temporary storage with concurrent or slow requests, causing service unavailability.
SeverityHigh
CVSS8.7
Exploit probability—
ProductSecure Email Gateway
PublishedNov 4, 2026
First seenNov 4, 2026
Weakness typeCWE-400Uncontrolled resource consumption
How to fix
Update
- SEPPmail Secure Email Gateway15.1.1 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| SEPPmail Secure Email Gateway | No range specified | 15.1.1 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.