← Database

CVE-2026-9592

N/A CVSS: N/A Published: 2026-07-17 Modified: 2026-07-17

Description

SEPPmail Secure Email Gateway & SEPPmail Cloud before version 15.0.4.2 allows an attacker to replay & hijack a user session in the GINA web portal, as the session token is disclosed inside the URL and a HTTP header.

Affected Platforms

Unknown

Weakness Type

CWE-598

References