high7.1
CVE-2026-8811
SEPPmail versions before 15.0.5 allow improper handling of attachment filenames during encrypted PDF generation.
Impact
SEPPmail versions before 15.0.5 allow improper handling of attachment filenames during encrypted PDF generation. An attacker can exploit this to create new files outside the intended directory, potentially placing files in web-accessible locations.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| SEPPmail | SEPPmail | before 15.0.5 |
Versions were read from the advisory text. No structured product data has been published for this record yet.