Information notices
A new SEPPmail Appliance release has been published.
With this release we closed another batch of the ETH Zurich findings:
- High: S/MIME Signature Additional Certificate CVE-2026-29140
- High: Bounded Subject Tag Sanitization CVE-2026-29141
- High: Plaintext secure-mail.html CVE-2026-29142
- High: S/MIME Decryption Impersonation CVE-2026-29143
- High: Unicode Subject Tags CVE-2026-29144
- High: GINA State Confusion Account Takeover CVE-2026-29139
- Medium: PGP Decryption Recipient LDAP...
Swisssign reduces the period for the domain validation from 365 to 198 days as of March 8th 2026 (and further reduction is planned for March 2027).
As a consequence, all previously validated domains where the validation period is more than 198 days ago would become non-validated on March 8th, and thus no new certificates could be issued.
To avoid the sudden change, re-validation for domains of customers in seppmail.cloud which have been last (re-) validated more than 180 days ago have been...
Information Notice about vulnerabilities and fixes in SEPPmail Appliances
- A number of vulnerabilities have been reported through SEPPmails Responsible Disclosure process, and subsequently reported to the swiss National Center for Cybersecurity (NCSC).
- The critical issues reported have been fixed in appliance release 15.0.1.
- In seppmail.cloud, the critical issues have been patched in November 2025, and some findings with lower severity have been deployed in seppmail.cloud in line with...
Scheduled maintenances
Due to maintenance at our hosting infrastructure our internal mail hosting server will be unavailable. During this time we will be unable to receive and send mail to or from seppmail.ch/com/de domains, thus we will also not be able to respond to support tickets in a timely manner.
There is no influence on availability of SEPPmail Cloud or onpremise appliances.
One of the hosting providers of the CH instance of SEPPmail Cloud announced network maintenance works. While no interruption is expected, such maintenance may still lead to unforeseeable circumstances. Our staff will closely monitor availability of all services and try to keep any disturbance as short as possible.
The extension setup of SEPPmail Cloud DE instance is about to go live. With added performance, geo redundancy and hoster redundancy we are ready for future growth. In early April traffic will start with a few selected NFR partner domains, before gradually going into production with all customers once the new IP addresses have warmed up sufficiently.
The oncoming changes should have no influence on customer experience. However, we advise to perform a few checks to ensure mail flow is not...