Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 06 Nov 2026 19:47:50 +0000 CVE-2026-114425 — Forged LFT metadata permits arbitrary file read and deletion https://db.gcve.eu/vuln/cve-2026-114425 <p><strong>Affected:</strong> SEPPmail AG SEPPmail Secure Email Gateway (SEG)</p> <p>SEPPmail Secure Email Gateway before 15.1.1 trusts a file path supplied in externally provided Large File Transfer attachment metadata. An unauthenticated remote sender can cause the mail-processing worker to disclose, move, or delete an accessible regular file when LFT is enabled and the message reaches an affected secure-mail processing path. The validated workers ran as root.</p> <p><strong>Affected:</strong> SEPPmail AG SEPPmail Secure Email Gateway (SEG)</p> <p>SEPPmail Secure Email Gateway before 15.1.1 trusts a file path supplied in externally provided Large File Transfer attachment metadata. An unauthenticated remote sender can cause the mail-processing worker to disclose, move, or delete an accessible regular file when LFT is enabled and the message reaches an affected secure-mail processing path. The validated workers ran as root.</p> https://db.gcve.eu/vuln/cve-2026-114425