Search/CVE-2026-9592
● CVE

CVE-2026-9592

DiscoveredJul 17, 2026UpdatedOct 24, 2026

SEPPmail Secure Email Gateway & SEPPmail Cloud before version 15.0.4.2 allows an attacker to replay & hijack a user session in the GINA web portal, as the session token is disclosed inside the URL and a HTTP header.

View graph Watch Export
CVSS v3.1
—
EPSS
0.24%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
Connections
1 relationships
Timeline
disclosure → media coverage
Jul 17, 2026
Disclosure — published as a CVE record. · last revised by NVD Oct 24, 2026