CVE-2026-2747: PGP Mixed Plaintext and Encrypted Content
Published Mar 4, 2026
·Updated
SEPPmail Secure Email Gateway before version 15.0.1 decrypts inline PGP messages without isolating them from surrounding unencrypted content, allowing exposure of sensitive information to an unauthorized actor.
Affected Software
2 affected components
SEPPmail Secure Email Gateway<15.0.1
SEPPmail SEPPmail<15.0.1
Event History
Mar 4, 2026
CVE Published
via MITRE·08:46 AM
Data Sourced
via MITRE·08:46 AM
DescriptionWeakness
Data Sourced
via NVD·09:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-2747?
The severity of CVE-2026-2747 is considered high due to potential exposure of sensitive information.
2
How do I fix CVE-2026-2747?
To fix CVE-2026-2747, upgrade to SEPPmail Secure Email Gateway version 15.0.1 or later.
3
What does CVE-2026-2747 affect?
CVE-2026-2747 affects SEPPmail Secure Email Gateway versions prior to 15.0.1.
4
What is the vulnerability in CVE-2026-2747?
CVE-2026-2747 allows decryption of inline PGP messages without isolating them from unencrypted content.
5
Can CVE-2026-2747 lead to data breaches?
Yes, CVE-2026-2747 can lead to data breaches by exposing sensitive information to unauthorized actors.