SEPPMail Secure E-Mail Gateway Vulnerabilities Enable RCE and Mail Traffic Access

Critical security flaws were disclosed in the SEPPMail Secure E-Mail Gateway that include unauthenticated remote code execution, path traversal, deserialization, eval injection, and template-engine injection vulnerabilities allowing attackers to read arbitrary mail, overwrite files (e.g., syslog configuration) and achieve full appliance takeover; fixes have been issued across versions 15.0.2.1–15.0.4.