Critical Vulnerability CVE-2026-2743 in SeppMail Exposes Users to Remote Code Execution

Strobes.Co

Critical Vulnerability CVE-2026-2743 in SeppMail Exposes Users to Remote Code Execution

First seen 8 Jun 2026, 10:17 UTC • •75.0

Article Content

1 / 4

Browse articles

ThreatCluster •June 9, 2026 at 09:58 UTC

•CVE-2026-2743 has a CVSS score of 9.8, indicating critical severity.
•The vulnerability allows remote code execution via arbitrary file write in SeppMail.
•Immediate mitigation is required as active exploits are confirmed and no patch is available.

CVE-2026-2743 is a critical vulnerability with a CVSS score of 9.8, affecting SeppMail versions 15.0.2.1 and earlier. The vulnerability allows arbitrary file write via path traversal, leading to potential remote code execution through the large file transfer feature. Active exploits have been reported, and no official patch is currently available, necessitating immediate mitigation efforts. The EPSS indicates a 30-day exploitation probability, emphasizing the urgency of addressing this issue. Security professionals are advised to validate their environments against this vulnerability using available tools. The vulnerability was published on March 5, 2026, and has since been updated with enrichment data from the NVD.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 105d ago How this analysis works

Timeline

2026-03-05

CVE-2026-2743 published

CVE-2026-2743 was officially published, detailing a critical vulnerability in SeppMail.

2026-06-07

Active exploits reported

Reports indicate that active exploits for CVE-2026-2743 are being utilized against vulnerable systems.

2026-06-08

NVD updates CVE record

The NVD updated the CVE record for CVE-2026-2743 after enrichment efforts were completed.

More articles in this cluster (3)

Threat Graph

7 entities, 6 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (3)

Remote Code Execution
Zero-day Exploit
T1190 - Exploit Public-Facing Application

Vulnerability (1)

CVE-2026-2743

Weakness (1)

CWE-22 - Path Traversal

Indicator (1)

15.0.2.1

Affected Platform (1)

SeppMail

Relationships

CVE-2026-2743 targets SeppMail
Remote Code Execution targets SeppMail
Zero-day Exploit targets SeppMail
T1190 - Exploit Public-Facing Application targets SeppMail
CVE-2026-2743 related to CWE-22 - Path Traversal
CVE-2026-2743 related to 15.0.2.1

Following this threat?

Track CVE-2026-2743 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Continue Reading

Critical WSO2 API Manager Vulnerability Under Active Exploitation A critical vulnerability (CVE-2026-5430) in WSO2 API Manager is being actively exploited, allowing unauthenticated attackers to forge admin tokens via JWT authentication bypass. This flaw, which has a CVSS score of 10.0, affects multiple WSO2 products including API Manager, Universal Gateway, Traffic Manager, and API…

Critical Linux Kernel Vulnerability CVE-2025-39682 Under Active Exploitation A critical vulnerability (CVE-2025-39682) in the Linux kernel allows remote code execution through mishandling of zero-length TLS records. This flaw affects kTLS-enabled hosts running vulnerable kernel versions, exposing them to attackers without authentication. CISA added this vulnerability to its Known Exploited…