High severity · published Jun 18, 2026
CVE-2026-8811
Path traversal in PDF generation module
7.1
CVSS
0.3%
EPSS
No
On KEV
Description
SEPPmail versions before 15.0.5 allow improper handling of attachment filenames during encrypted PDF generation. An attacker can exploit this to create new files outside the intended directory, potentially placing files in web-accessible locations.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 25% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SE
Secure Email Gateway · SEPPmail AG
before 15.0.5 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-8811
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-8811
downloads.seppmail.com
https://downloads.seppmail.com/extrelnotes/150/ERN15.0.html#possible-path-traversal-vulnerability
More from Secure Email Gateway
9.3
CVE-2026-44125
Missing Authorization in GINAv2
9.3
CVE-2026-44128
Unauthenticated Remote Code Execution
9.2
CVE-2026-44126
Insecure deserialization
8.8
CVE-2026-44127
Local File Inclusion (LFI) and Arbitrary File Deletion
8.6
CVE-2026-84830
OS command injection in privileged configuration handling