Information notices
We have identified an issue in the recently released PowerShell Cloud Module version 2.5.0. A regular expression (regex) failure in this version causes outbound emails to bypass the designated outbound connector, delivering them directly through Exchange Online (EXO) instead.
ImpactIf you have deployed or updated transport rules using version 2.5.0, your outbound mail routing may not be processing as intended and will bypass the seppmail.cloud secure gateway.
Immediate Mitigation...As we communicated to the partners in newsletters, webinars and release notes since the beginning of 2026, the SEPPmail Appliance versions released since then contain a number of fixes for security findings in OpenSSL and SEPPmail code.
The most recent patch release 15.0.4 is available since April 26 2026, with the most recent hotfix release 15.0.4.3 available since this week, May 11 2026.
We would like to remind our partners that they should update their SEPPmail Appliances as soon as...
A new SEPPmail Appliance hotfix release has been published.
Unfortunately, we had to release another hotfix release due to PGP encryption and decryption issues.
The main problem was that many PGP keys are still in use that rely on obsolete algorithms marked as insecure, such as ElGamal or DSS.
The newly included Sequoia GPG rejects these algorithms by default, which caused encryption and decryption problems.
For now, we will allow Sequoia to use all algorithms that are supported by the...
A new SEPPmail Appliance hotfix release has been published.
The primary fix in this release prevents system freezes. In addition, we added static subject settings for the SCEP MPKI connector and fixed a bug in the interim certificate generation logic.
Security
The following CVEs cover the Infoguard findings resolved in version 15.0.4:
- Exposure of Sensitive Information to an Unauthorized Actor (CVE-2026-7864)
- Local File Inclusion (LFI) and Arbitrary File Deletion (CVE-2026-44127)
- ...
In order to ensure that the automatic renewal of the SwissSign Silver Certificate revocation goes smoothly for the SEPPmail Appliances, we recommend the following setting changes to be in effect as soon as possible (and not later than 22.04.2026 at 15:00 GMT+2):
Under MPKI Settings, enable the following:
- “Automatically renew expiring certificates if validity days left less than”
- “Automatically create certificates for active users without certificates” : This will ensure that the...
Scheduled maintenances
Rescheduled again by one day due to appointment conflicts. Apologies for the many alerts.
Update of all appliance systems in DE instance.
No outage is expected, but some delay in sending and receiving e-mails may be possible. Short disruption of our cloud portal may also happen, please try again a couple of minutes later in that case.
Update of all appliance systems in CH instance.
No outage is expected, but some delay in sending and receiving e-mails may be possible. Short disruption of our cloud portal may also happen, please try again a couple of minutes later in that case.
We are performing a series of system updates for security and stability reasons. The updates have undergone testing on development and preview systems, and are gradually performed on all systems in scope. All systems in scope are in cluster / high-availability configuration.
During the upgrade, machines are taken out of the regular mailflow, and are re-integrated into the mailflow after the upgrades are done and functionality has been tested.
We do not expect any impact on overall system...
Maintenance of our CRM system which is used by https://login.seppmail.cloud/ for permission management. Partner/Domain administrators may not have full permissions to see customer data other than their own mailbox during CRM downtime. Please try again after maintenance period.
This maintenance has no influence on mail flow or any settings related to mail handling.