{"id":"CVE-2026-114421","published":"2026-11-04T09:17:41.553","lastModified":"2026-11-04T09:17:41.553","description":"SEPPmail Secure Email Gateway before 15.1.1 permits password recovery for a created but unregistered GINA account whose initial password is empty without adequately verifying ownership. A remote unauthenticated attacker who identifies such an account can set a new password, authenticate as that account, and prevent the intended recipient from using it until recovery.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-640"],"vendors":[],"products":[],"references":[{"url":"https://docs.seppmail.com/en/20_revision-history.html","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}