The vulnerability identified as CVE-2026-29142 affects SEPPmail Secure Email Gateway prior to version 15.0.3. It is classified under CWE-325, indicating a missing cryptographic step in the handling of GINA-encrypted emails. This cryptographic omission allows attackers to forge emails that appear to be properly encrypted by the gateway, potentially bypassing security assurances. The CVSS 4.0 base score is 6.3, reflecting a medium severity with network attack vector, no privileges required, and no user interaction needed. The vulnerability impacts the integrity and security of email communications processed by the gateway.

An attacker can forge GINA-encrypted emails, which may lead to acceptance of malicious or spoofed emails as legitimate secure communications. This undermines the integrity and trustworthiness of the email gateway's encryption process. There is no indication of confidentiality or availability impact. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vulnerability affects versions before 15.0.3, upgrading to version 15.0.3 or later is likely recommended once official guidance is available. Until then, monitor vendor communications for patches or official fixes. No cloud service remediation applies as this is an on-premises product.