CVE-2026-2743: SEPPmail User Web Interface Arbitrary File Write to RCE
Published Mar 5, 2026
·Updated
Arbitrary File Write via Path Traversal upload to Remote Code Execution in SeppMail User Web Interface. The affected feature is the large file transfer (LFT).
This issue affects SeppMail: 15.0.2.1 and before
Affected Software
2 affected components
SEPPmail SEPPmail<15.0.2.1
SEPPmail SEPPmail<=15.0.2.1
Event History
Mar 5, 2026
CVE Published
via MITRE·06:45 AM
Data Sourced
via MITRE·06:45 AM
DescriptionWeakness
Data Sourced
via NVD·07:16 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-2743?
CVE-2026-2743 is classified as a critical vulnerability due to its potential for remote code execution.
2
How do I fix CVE-2026-2743?
To fix CVE-2026-2743, upgrade SeppMail to version 15.0.2.2 or later.
3
What does CVE-2026-2743 affect?
CVE-2026-2743 affects the large file transfer feature in SeppMail versions 15.0.2.1 and earlier.
4
How does CVE-2026-2743 exploit the system?
CVE-2026-2743 allows for arbitrary file writes via path traversal, potentially leading to remote code execution.
5
Is my system vulnerable to CVE-2026-2743?
If you are using SeppMail version 15.0.2.1 or earlier, your system is vulnerable to CVE-2026-2743.