CVE-2026-7864: CVE-2026-7864: güvenlik açığı

Açıklama (NVD)

SEPPmail Secure Email Gateway before version 15.0.4 exposes server environment variables through an unauthenticated endpoint in the new GINA UI, allowing remote attackers to obtain sensitive system information.

Özet bilgiler

CVSS v4.0

6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS

%16,11 (yüzdelik 97)

CWE

CWE-497

Yama

Yok / bilinmiyor

Kaynaklar

• NVD kaydı
• downloads.seppmail.com
• labs.infoguard.ch
• CWE-497