Security Advisory
CVE-2026-84831
N/A
UNKNOWN
Vulnerability Description
SEPPmail Secure Email Gateway before 15.0.7 creates a fully privileged session before required multi-factor authentication enrollment is completed. An attacker with the password for an MFA-required but unenrolled account can access protected functionality without providing a second factor.
Published Date
September 3, 2026
Official Source
NIST NVD Advisory