The vulnerability identified as CVE-2026-29133 affects SEPPmail Secure Email Gateway prior to version 15.0.3. It stems from improper input validation (CWE-20) that permits an attacker to upload PGP keys with UIDs that do not correspond to the email addresses they claim to represent. This flaw could undermine the integrity of key management within the gateway, potentially impacting secure email communications. The CVSS 4.0 base score is 5.3, reflecting a medium severity with network attack vector, low attack complexity, no privileges required beyond limited user privileges, and no user interaction needed.

An attacker with limited privileges can upload PGP keys with mismatched UIDs, which may cause confusion or misrepresentation in encrypted email communications. This could affect the trustworthiness of key associations but does not indicate direct code execution or data disclosure from the provided information. There are no known active exploits in the wild at this time.

No official patch or remediation details are provided in the available data. Since the vulnerability affects versions before 15.0.3, upgrading to version 15.0.3 or later is implied as a remediation step. Patch status is not yet confirmed—check the vendor advisory for current remediation guidance.