CVE-2026-44128

Description

SEPPmail Secure Email Gateway before version 15.0.2.1 allows unauthenticated remote code execution in the new GINA UI because an endpoint passes attacker-controlled input from a parameter to Perl's eval.

References

• https://downloads.seppmail.com/extrelnotes/150/ERN15.0.html#security