https://vulnfeed.org/Every disclosure, as it lands. Critical-only feed available.enhttps://vulnfeed.org/cve/CVE-2026-114426/https://vulnfeed.org/cve/CVE-2026-114426/Wed, 04 Nov 2026 09:17:41 +0000SEPPmail Secure Email Gateway before 15.1.1 processes and writes v1 file-interface upload data before authenticating the caller and without an absolute request-size limit. An unauthenticated remote attacker can occupy workers and consume temporary storage with concurrent or slow requests, causing service unavailability.https://vulnfeed.org/cve/CVE-2026-114421/https://vulnfeed.org/cve/CVE-2026-114421/Wed, 04 Nov 2026 08:42:22 +0000SEPPmail Secure Email Gateway before 15.1.1 permits password recovery for a created but unregistered GINA account whose initial password is empty without adequately verifying ownership. A remote unauthenticated attacker who identifies such an account can set a new password, authenticate as that account, and prevent the intended recipient from using it until recovery.https://vulnfeed.org/cve/CVE-2026-114425/https://vulnfeed.org/cve/CVE-2026-114425/Wed, 04 Nov 2026 08:29:55 +0000SEPPmail Secure Email Gateway before 15.1.1 trusts a file path supplied in externally provided Large File Transfer attachment metadata. An unauthenticated remote sender can cause the mail-processing worker to disclose, move, or delete an accessible regular file when LFT is enabled and the message reaches an affected secure-mail processing path. The validated workers ran as root.https://vulnfeed.org/cve/CVE-2026-114424/https://vulnfeed.org/cve/CVE-2026-114424/Wed, 04 Nov 2026 08:28:20 +0000SEPPmail Secure Email Gateway before 15.1.1 can evaluate attacker-influenced replacement text as Perl code in sender or recipient replacement rules. An unauthenticated remote sender can execute operating-system commands in the mail-processing worker context when an active rule uses message-derived replacement data and its search condition matches. The validated worker context was root.