by Kastro
Paper/Archive/CVE-2026-2743

CVE-2026-2743

SeppMail SeppMail — SEPPmail User Web Interface Arbitrary File Write to RCE

EPSS 1.0%public exploitCVSS 10.0
critical.is priorityof 100
52
CVSS 10.0 (CNA)10.0 / 10 × 3030.0Not in CISA KEV+300.0EPSS percentile 61.4.614 × 2012.3Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

Arbitrary File Write via Path Traversal upload to Remote Code Execution in SeppMail User Web Interface. The affected feature is the large file transfer (LFT). This issue affects SeppMail: 15.0.2.1 and before

Affected

ProductAffectedFixed inSource
SeppMailunknown – 15.0.2.1–CNA

Scores by source

NCSC.ch (CNA)10.0CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:A/AU:Y
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: poc · Automatable: yes · Technical impact: total

References

refdownloads.seppmail.com/extrelnotes/150/ERN15.0.htmlexploitlabs.infoguard.ch/posts/seppmail_secure_e-mail_gateway_rce_vulnerabilities_cve-2026-2743_cve-2026-7864_cve-2026-44127_cve-2026-44128