~ / search / CVE-2026-114420

CVE-2026-114420

LDAP wildcard injection exposes GINA recipient accounts

State: published CNA: NCSC.ch CVSS 4.0 6.9 Medium NVD: deferred

Description

SEPPmail Secure Email Gateway before 15.1.1 does not neutralize LDAP metacharacters in an unauthenticated account-selection input in its GINA web interface. A remote unauthenticated attacker can enumerate email addresses.

Affected products

VendorProductVersions
SEPPmail AG SEPPmail Secure Email Gateway (SEG) <15.1.1

References

External links from the record. They lead to third-party sites.