CVE-2026-114424: Code execution through double evaluation in address replacement rules

Analyse på rafaelpfister.ch

Artikkel · 3. november 2026 SEPPmail 15.1.1: five CVE fixes and a fix for the DNS regression from 15.1.0.1 SEPPmail 15.1.1 closes five vulnerabilities with CVSS scores of up to 9.2, including code execution via address replacement rules and file access via Large File Transfer. The patch release also fixes a DNS regression from 15.1.0.1 and should be installed promptly.

Produsentens beskrivelse (engelsk)

SEPPmail Secure Email Gateway before 15.1.1 can evaluate attacker-influenced replacement text as Perl code in sender or recipient replacement rules. An unauthenticated remote sender can execute operating-system commands in the mail-processing worker context when an active rule uses message-derived replacement data and its search condition matches. The validated worker context was root.

Referansedata

Produsent

SEPPmail AG

Berørte produkter

SEPPmail Secure Email Gateway (SEG)

CVSS 4.0

9.2 (CRITICAL)

Vektor

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Type svakhet

CWE-95: Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')

Publisert

4. november 2026

Offisielle kilder

← Alle sårbarheter

CVE-2026-114424 Code execution through double evaluation in address replacement rules

Analyse på rafaelpfister.ch

Produsentens beskrivelse (engelsk)

Referansedata

Offisielle kilder

Abonner