CVE-2026-27443

High · 7.5

CVSS

7.5

EPSS

0.4%

Published

Mar 4, 2026

CISA due date

—

The record

SEPPmail Secure Email Gateway before version 15.0.1 does not properly sanitize the headers from S/MIME protected MIME entities, allowing an attacker to control trusted headers.

Affected packages

Ecosystem	Package	Introduced	Fixed