{"id":"CVE-2026-114421","aliases":[],"cve":{"records":[{"id":"CVE-2026-114421","source":"NCSC.ch","state":"PUBLISHED","reasons":[],"replacements":[],"disputed":false,"unsupportedWhenAssigned":false,"reserved":"2026-10-21T12:57:12.792Z","published":"2026-11-04T08:42:22.198Z","modified":"2026-11-04T08:42:22.198Z"}],"publishers":[{"name":"NCSC.ch","role":"CNA","organizationId":"455daabc-a392-441d-aa46-37d35189897c","modified":"2026-11-04T08:42:22.198Z"}],"references":[{"url":"https://docs.seppmail.com/en/20_revision-history.html","tags":[],"source":"NCSC.ch"}],"weaknesses":[{"id":"CWE-640","description":"CWE-640 Weak Password Recovery Mechanism for Forgotten Password","source":"NCSC.ch"}],"applicability":[],"prioritization":[]},"title":"Empty initial password permits GINA account takeover","titleSource":"NCSC.ch","descriptionSource":"NCSC.ch","description":"SEPPmail Secure Email Gateway before 15.1.1 permits password recovery for a created but unregistered GINA account whose initial password is empty without adequately verifying ownership. A remote unauthenticated attacker who identifies such an account can set a new password, authenticate as that account, and prevent the intended recipient from using it until recovery.","score":8.3,"severity":"high","published":"2026-11-04T08:42:22.198Z","modified":"2026-11-04T08:42:22.198Z","withdrawn":false,"knownExploited":false,"affected":[],"products":[{"vendor":"SEPPmail AG","name":"SEPPmail Secure Email Gateway (SEG)","platforms":[],"versions":[{"version":"0","status":"affected","lessThan":"15.1.1","versionType":"custom"}],"defaultStatus":"unknown","cpes":[],"source":"NCSC.ch","url":"https://www.cve.org/CVERecord?id=CVE-2026-114421"}],"remediation":[],"references":["https://docs.seppmail.com/en/20_revision-history.html"],"sources":[{"name":"CVE","id":"CVE-2026-114421","modified":"2026-11-04T08:42:22.198Z","url":"https://www.cve.org/CVERecord?id=CVE-2026-114421"}],"assessments":[{"source":"NCSC.ch","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N","score":8.3}],"sourceAffected":[],"observedAt":"2026-11-04T08:50:43.381Z","kev":{"status":"not-listed","checkedAt":"2026-11-05T11:15:30.978Z"},"coverage":[{"source":"NVD","status":"no-result","checkedAt":"2026-11-04T08:55:32.446Z","attemptedAt":"2026-11-04T08:55:32.446Z"},{"source":"GHSA","status":"no-result","checkedAt":"2026-11-04T08:55:32.446Z","attemptedAt":"2026-11-04T08:55:32.446Z"},{"source":"EUVD","status":"no-result","checkedAt":"2026-11-04T08:55:32.765Z","attemptedAt":"2026-11-04T08:55:32.765Z"},{"source":"EPSS","status":"no-result","checkedAt":"2026-11-04T08:55:32.446Z","attemptedAt":"2026-11-04T08:55:32.446Z"}],"evidence":[],"aiSummary":{"text":"SEPPmail Secure Email Gateway before 15.1.1 allows password recovery for unregistered GINA accounts with empty initial passwords without verifying ownership, permitting a remote unauthenticated attacker to set a new password and authenticate as that account. The attacker must identify such an account. This can prevent the intended recipient from using the account until recovery.","model":"@cf/meta/llama-3.3-70b-instruct-fp8-fast","generatedAt":"2026-11-04T08:51:11.513Z","sources":[{"name":"CVE","url":"https://www.cve.org/CVERecord?id=CVE-2026-114421"}]}}