Seppmail CVE-2026-29135

Risk assessment is constrained by the absence of CVSS vector data and EPSS probability scores. The reported CWE-20 (Improper Input Validation) combined with the authentication bypass tag suggests a logic flaw in input handling rather than a memory corruption or remote code execution vulnerability. The fact that NCSC.ch (a national cybersecurity authority) reported this indicates credibility and potential real-world relevance. However, without a published CVSS vector or exploitation data, the true attack surface and impact severity remain unclear-subject sanitization bypass could range from a low-impact information disclosure (revealing internal email structure) to a high-impact attack (email spoofing or phishing enablement, depending on downstream processing). The absence of public exploit code and KEV confirmation suggests this is not actively exploited in the wild, but the sanitization bypass nature implies moderate to high priority for users handling sensitive email traffic. Organizations relying on SEPPmail for email security should treat this as a moderate-to-high priority patch given the email security context.

An attacker crafts a specially formatted email with a malicious password-tag embedded in the subject line or message metadata. When processed by a vulnerable SEPPmail Secure Email Gateway, the sanitization filter fails to properly encode or reject the crafted tag, allowing the attacker's content to bypass security controls. Depending on downstream usage, this could enable email header injection, phishing attacks, or exposure of sensitive email routing information. No public exploit code has been identified at the time of analysis.