CVE-2026-102103: CWE-918 Server-Side Request Forgery (SSRF) in Kiteworks Email Protection Gateway
Kiteworks Email Protection Gateway versions before 9.5.0 contain a Server-Side Request Forgery (SSRF) vulnerability. This flaw allows a remote, unauthenticated attacker to cause the gateway to send crafted requests to internal or unintended network destinations when retrieving a certificate revocation list from inbound messages. Exploitation could lead to disclosure of sensitive internal information or disruption of the gateway's operation.
AI Analysis
Technical Summary
CVE-2026-102103 is a critical SSRF vulnerability (CWE-918) in Kiteworks Email Protection Gateway prior to version 9.5.0. The vulnerability arises during the gateway's process of fetching a certificate revocation list embedded in inbound email messages. An unauthenticated remote attacker can exploit this to induce the gateway to make arbitrary requests to internal or unintended network targets. This can result in sensitive information disclosure or denial of service conditions affecting the gateway.
Potential Impact
The vulnerability enables remote unauthenticated attackers to induce the gateway to issue arbitrary requests to internal network resources or other unintended destinations. This can lead to disclosure of sensitive internal information and disruption of the gateway's availability. The CVSS v3.1 base score is 9.1, reflecting high confidentiality impact and high availability impact with no privileges or user interaction required.
Mitigation Recommendations
A fixed version 9.5.0 of Kiteworks Email Protection Gateway is available that addresses this SSRF vulnerability. Users should upgrade to version 9.5.0 or later to remediate this issue. No other mitigations or temporary workarounds are indicated in the available data.
CVE-2026-102103: CWE-918 Server-Side Request Forgery (SSRF) in Kiteworks Email Protection Gateway
Description
Kiteworks Email Protection Gateway versions before 9.5.0 contain a Server-Side Request Forgery (SSRF) vulnerability. This flaw allows a remote, unauthenticated attacker to cause the gateway to send crafted requests to internal or unintended network destinations when retrieving a certificate revocation list from inbound messages. Exploitation could lead to disclosure of sensitive internal information or disruption of the gateway's operation.
CVSS v3.1
Score 9.1critical
Affected software
Kiteworks
Email Protection Gateway
pkg:github/kiteworks/email-protection-gatewayRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-102103 is a critical SSRF vulnerability (CWE-918) in Kiteworks Email Protection Gateway prior to version 9.5.0. The vulnerability arises during the gateway's process of fetching a certificate revocation list embedded in inbound email messages. An unauthenticated remote attacker can exploit this to induce the gateway to make arbitrary requests to internal or unintended network targets. This can result in sensitive information disclosure or denial of service conditions affecting the gateway.
Potential Impact
The vulnerability enables remote unauthenticated attackers to induce the gateway to issue arbitrary requests to internal network resources or other unintended destinations. This can lead to disclosure of sensitive internal information and disruption of the gateway's availability. The CVSS v3.1 base score is 9.1, reflecting high confidentiality impact and high availability impact with no privileges or user interaction required.
Mitigation Recommendations
A fixed version 9.5.0 of Kiteworks Email Protection Gateway is available that addresses this SSRF vulnerability. Users should upgrade to version 9.5.0 or later to remediate this issue. No other mitigations or temporary workarounds are indicated in the available data.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- cisa-cg
- Date Reserved
- 2026-09-28T17:39:13.561Z
- Cvss Version
- 3.1
- State
- PUBLISHED
Threat ID: 6abd724b2a4e24523d8ebdf4
Added to database: 09/30/2026, 20:34:19 UTC
Last enriched: 09/30/2026, 21:18:19 UTC
Last updated: 09/30/2026, 22:38:26 UTC
Views: 5
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.