CVE-2026-9592
High
Description
SEPPmail Secure Email Gateway & SEPPmail Cloud before version 15.0.4.2 allows an attacker to replay & hijack a user session in the GINA web portal, as the session token is disclosed inside the URL and a HTTP header.
SeverityHigh
CVSS7.5
Exploit probability—
ProductSecure Email Gateway
PublishedJul 17, 2026
First seenJul 17, 2026
Weakness typeCWE-598CWE-598
How to fix
Update
- SEPPmail Secure Email Gateway15.0.4.2 or later
- SEPPmail Cloud15.0.4.2 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| SEPPmail Secure Email Gateway | No range specified | 15.0.4.2 |
| SEPPmail Cloud | No range specified | 15.0.4.2 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.