CVE-2026-44125: Missing Authorization in GINAv2
Published May 8, 2026
·Updated
SEPPmail Secure Email Gateway before version 15.0.4 fails to enforce authorization checks for multiple endpoints in the new GINA UI, allowing unauthenticated remote attackers to access functionality that should require a valid session.
Affected Software
1 affected component
SEPPmail SEPPmail Secure Email Gateway<15.0.4
Event History
May 8, 2026
CVE Published
via MITRE·01:15 PM
Data Sourced
via MITRE·01:15 PM
DescriptionWeakness
Data Sourced
via NVD·02:16 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2026-44125?
CVE-2026-44125 has been assessed as a high severity vulnerability due to the lack of authorization checks.
2
How do I fix CVE-2026-44125?
To fix CVE-2026-44125, upgrade to SEPPmail Secure Email Gateway version 15.0.4 or later.
3
What functionality is affected by CVE-2026-44125?
CVE-2026-44125 allows unauthenticated users to access endpoints in the GINA UI that should require authentication.
4
Who is affected by CVE-2026-44125?
Users of SEPPmail Secure Email Gateway versions prior to 15.0.4 are potentially affected by CVE-2026-44125.
5
Can CVE-2026-44125 be exploited remotely?
Yes, CVE-2026-44125 can be exploited by remote attackers without authentication.