https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-06T13:34:02.131056+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-114425 fkie_cve-2026-114425 2026-11-06T13:34:02.147304+00:00

SEPPmail Secure Email Gateway before 15.1.1 trusts a file path supplied in externally provided Large File Transfer attachment metadata. An unauthenticated remote sender can cause the mail-processing worker to disclose, move, or delete an accessible regular file when LFT is enabled and the message reaches an affected secure-mail processing path. The validated workers ran as root.

 https://db.gcve.eu/vuln/ghsa-83v7-h64g-wr4c GHSA-83v7-h64g-wr4c 2026-11-06T13:34:02.147671+00:00

SEPPmail Secure Email Gateway before 15.1.1 trusts a file path supplied in externally provided Large File Transfer attachment metadata. An unauthenticated remote sender can cause the mail-processing worker to disclose, move, or delete an accessible regular file when LFT is enabled and the message reaches an affected secure-mail processing path. The validated workers ran as root.