CVE-2026-29133: UID Regex Bypass
Published Apr 2, 2026
·Updated
SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to upload PGP keys with UIDs that do not match their email address.
Affected Software
2 affected components
SEPPmail SEPPmail Secure Email Gateway<15.0.3
SEPPmail Secure Email Gateway<15.0.3
Event History
Apr 2, 2026
CVE Published
via MITRE·08:26 AM
Data Sourced
via MITRE·08:26 AM
DescriptionWeakness
Data Sourced
via NVD·09:16 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-29133?
CVE-2026-29133 is classified as a medium severity vulnerability due to its potential impact on email security.
2
How do I fix CVE-2026-29133?
To fix CVE-2026-29133, upgrade the SEPPmail Secure Email Gateway to version 15.0.3 or later.
3
What does CVE-2026-29133 affect?
CVE-2026-29133 affects SEPPmail Secure Email Gateway versions prior to 15.0.3.
4
What can an attacker do with CVE-2026-29133?
An attacker can upload PGP keys with UIDs that do not match their email address, compromising the integrity of email communications.
5
Is CVE-2026-29133 a zero-day vulnerability?
CVE-2026-29133 is not a zero-day vulnerability, as a patch has been released in version 15.0.3.