CVE-2018-7705: Directory traversal vulnerability in SecurEnvoy SecurMail before 9.2.501 allows remote authenticated users...

Security readout for executives and security teams

CVE-2018-7705 is an email confidentiality issue in SecurEnvoy SecurMail before 9.2.501. A logged-in remote user could use directory traversal in an upload endpoint to read email messages intended for other recipients. The business risk is unauthorized disclosure of sensitive email handled by affected SecurMail systems. Exposure is limited to organizations running SecurEnvoy SecurMail before 9.2.501, especially where the SecurMail web application is reachable by users or the internet. The flaw requires authenticated remote access, so account compromise or low-trust user access increases concern. Prioritize remediation where SecurMail protects sensitive customer, legal, financial, or executive communications. The flaw is authenticated, but the impact is cross-recipient email disclosure, and public exploit information is referenced. Upgrade and log review should be handled as a near-term security task. Mitigation focus: Upgrade SecurEnvoy SecurMail to 9.2.501 or later.; Check SecurEnvoy guidance for any additional hardening steps.; Limit access to SecurMail to trusted networks where feasible..

Prepared

Jun 7, 2026, 14:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.