CVE-2026-44129 — Server-side template injection
SEPPmail Secure Email Gateway before version 15.0.4 contains a server-side template injection vulnerability in the new GINA UI because an endpoint accepts attacker-controlled te…
Published: 2026-05-08 · CVSS: 8.3 · CVSS 4.0
SEPPmail Secure Email Gateway before version 15.0.4 contains a server-side template injection vulnerability in the new GINA UI because an endpoint accepts attacker-controlled template, allowing remote attackers to execute arbitrary template expressions and potentially achieve remote code execution depending on the enabled template plugins.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7