CVE Watch26 de out. de 2026

CVE-2026-7864

SEPPmail Secure Email Gateway before version 15.0.4 exposes server environment variables through an unauthenticated endpoint in the new GINA

CVSS

—

Sem CVSS

EPSS

16.1%

p97

KEV

—

Exploit Today

0-100

Publicado: 8 de mai. de 2026 · Última mod.: 26 de out. de 2026 · CWE-497

EPSS · 30d

0.5%EPSS · 30 dias16.1%

2026-10-142026-11-11

Descrição técnica

SEPPmail Secure Email Gateway before version 15.0.4 exposes server environment variables through an unauthenticated endpoint in the new GINA UI, allowing remote attackers to obtain sensitive system information.

Referências oficiais

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2026-961375.5 MÉD

40.2%

——12Exposure of sensitive system information to an unauthorized control sphere in Windows Graphics Kernel allows an authorized attacker to disclose information locally.1d CVE-2026-960015.5 MÉD

45.5%

——14Exposure of sensitive system information to an unauthorized control sphere in Windows Bluetooth Service allows an authorized attacker to disclose information locally.1d CVE-2026-1199424.7 MÉD

32.1%

——10Exposure of sensitive system information to an unauthorized control sphere in Windows HTTP.sys allows an authorized attacker to disclose information locally.2d CVE-2026-1198825.3 MÉD

57.7%

——17Exposure of sensitive system information to an unauthorized control sphere in Windows Remote Desktop Services allows an authorized attacker to disclose information over a network.2d CVE-2026-1198565.5 MÉD

42.6%

——13Exposure of sensitive system information to an unauthorized control sphere in Windows Win32K allows an authorized attacker to disclose information locally.2d CVE-2026-1198227.0 ALT

30.6%

——9Exposure of sensitive system information to an unauthorized control sphere in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.2d