~ / search / CVE-2026-114424

CVE-2026-114424

Code execution through double evaluation in address replacement rules

State: published CNA: NCSC.ch CVSS 4.0 9.2 Critical NVD: deferred

Description

SEPPmail Secure Email Gateway before 15.1.1 can evaluate attacker-influenced replacement text as Perl code in sender or recipient replacement rules. An unauthenticated remote sender can execute operating-system commands in the mail-processing worker context when an active rule uses message-derived replacement data and its search condition matches. The validated worker context was root.

Affected products

VendorProductVersions
SEPPmail AG SEPPmail Secure Email Gateway (SEG) <15.1.1

References

External links from the record. They lead to third-party sites.