As we communicated to the partners in newsletters, webinars and release notes since the beginning of 2026, the SEPPmail Appliance versions released since then contain a number of fixes for security findings in OpenSSL and SEPPmail code.

The most recent patch release 15.0.4 is available since April 26 2026, with the most recent hotfix release 15.0.4.3 available since this week, May 11 2026.

We would like to remind our partners that they should update their SEPPmail Appliances as soon as...

A new SEPPmail Appliance hotfix release has been published.

Unfortunately, we had to release another hotfix release due to PGP encryption and decryption issues.
The main problem was that many PGP keys are still in use that rely on obsolete algorithms marked as insecure, such as ElGamal or DSS.
The newly included Sequoia GPG rejects these algorithms by default, which caused encryption and decryption problems.
For now, we will allow Sequoia to use all algorithms that are supported by the...

A new SEPPmail Appliance hotfix release has been published.

The primary fix in this release prevents system freezes. In addition, we added static subject settings for the SCEP MPKI connector and fixed a bug in the interim certificate generation logic.

Security

The following CVEs cover the Infoguard findings resolved in version 15.0.4:

• Exposure of Sensitive Information to an Unauthorized Actor (CVE-2026-7864)
• Local File Inclusion (LFI) and Arbitrary File Deletion (CVE-2026-44127)
• ...

In order to ensure that the automatic renewal of the SwissSign Silver Certificate revocation goes smoothly for the SEPPmail Appliances, we recommend the following setting changes to be in effect as soon as possible (and not later than 22.04.2026 at 15:00 GMT+2):
Under MPKI Settings, enable the following:

• “Automatically renew expiring certificates if validity days left less than”
• “Automatically create certificates for active users without certificates” : This will ensure that the...