CVE-2026-84832
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
Sep 03, 2026
Vendor
unknown
Description
SEPPmail Secure Email Gateway before 15.0.6 deserializes attacker-controlled data in a privileged REST import workflow without adequate validation. An attacker with a privileged API token can execute arbitrary commands with "nobody" privileges.