CVE-2026-2746 MEDIUM

CVE-2026-2746: Missing PGP Signature Tag

Vendor Seppmail

Product Secure Email Gateway

Weakness CWE-347

Published March 4, 2026

Last update March 4, 2026

View on NVD All CVEs

CVSS base score

6.9/10

Attack vector Network

Attack complexity Low

Privileges required None

User interaction None

Confidentiality —

Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N

What the vulnerability does

01Description

SEPPmail Secure Email Gateway before version 15.0.1 does not properly communicate PGP signature verification results, leaving users unable to detect forged emails.

Key dates

02Disclosure timeline

March 4, 2026 CVE published

March 4, 2026 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2026-2746 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/347.html

Related vulnerabilities

CVE-2026-2746: Missing PGP Signature Tag

01Description

02Disclosure timeline

03References

04Related CVE