CVE-2026-114420 | BDVDB-2026-400263 Detail
SEPPmailSEPPmail Secure Email Gateway (SEG)
Description#
SEPPmail Secure Email Gateway before 15.1.1 does not neutralize LDAP metacharacters in an unauthenticated account-selection input in its GINA web interface. A remote unauthenticated attacker can enumerate email addresses.
Impact#
CAPEC-136 LDAP Injection
Weaknesses#
- CWE-90 Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.