Kiteworks Email Protection Gateway versions prior to 9.5.0 contain a Server-Side Request Forgery (SSRF) vulnerability. This flaw allows a remote, unauthenticated attacker to cause the gateway to send crafted requests to internal or unintended network destinations when rendering message content with external resource references. Exploitation could lead to disclosure of sensitive internal information or unintended actions on internal systems.
CVE-2026-102106 is an improper authentication vulnerability in the Kiteworks Email Protection Gateway administrative service. The service fails to consistently enforce administrator authentication, allowing attackers referencing a valid administrator account to bypass password checks. This flaw enables unauthorized creation, modification, or deletion of internal users and managed domains, as well as changes to security configurations. Deleting a managed domain can remove its user accounts and potentially lock out legitimate administrators.
CVE-2026-102107 is a medium severity vulnerability in Kiteworks Core involving an authorization bypass in the file-request feature. An authenticated user can send a request that appears to originate from another user because the server does not verify authorization properly. Exploitation requires the feature to be enabled for the attacker and the targeted recipient to act on the request. This flaw could allow solicitation of files or information under a trusted identity.
CVE-2026-102108 is a high-severity vulnerability in Kiteworks Email Protection Gateway where an authenticated administrator with specific queue-management privileges can submit a crafted serialized object to a cluster management interface. This object is deserialized without sufficient validation, potentially allowing arbitrary code execution under the gateway service account. The vulnerability affects versions prior to 9.5.0.
CVE-2026-102109 is a SQL injection vulnerability in Kiteworks Secure Data Forms. It occurs when a value derived from an authenticated user's stored account data is used in a database query without proper sanitization. Exploitation requires an authenticated session and only affects deployments using a specific optional feature. The vulnerability affects versions prior to 9.5.1.
CVE-2026-102110 is a medium severity vulnerability in Kiteworks Core where an endpoint used during initial appliance setup lacks authentication and does not enforce its intended state precondition. This allows an unauthenticated network attacker to repeatedly trigger the privileged activation process during the initial activation window, potentially disrupting setup and leaving the appliance incompletely configured. The vulnerability is only exploitable during the first-time activation of the appliance and is not accessible afterward.
CVE-2026-102111 is a vulnerability in Kiteworks Core where the software does not enforce the maximum allowed value for a configurable security-policy setting. An authenticated administrator can set this value beyond its intended range, causing the associated security control to never activate. Despite this, the control appears enabled in the administrative interface and audit logs, effectively rendering it silently ineffective.
CVE-2026-102112 is a privilege escalation vulnerability in Kiteworks Core that allows an attacker with existing code execution as an unprivileged backend service account to escalate privileges to root and execute arbitrary commands with highest privileges. Exploitation requires local access to the service account. The vulnerability is due to improper neutralization of special elements used in OS commands (CWE-78).
CVE-2026-102113 is a privilege escalation vulnerability in Kiteworks Core that allows an attacker with local access as an unprivileged backend service account to escalate privileges to root. The issue arises from improper handling of filesystem paths by a privileged routine, enabling arbitrary command execution with root privileges. Exploitation requires prior code execution under the lower-privileged service account. The vulnerability affects Kiteworks Core versions prior to 9.5.0.
CVE-2026-102114 is a command injection vulnerability in Kiteworks Core that allows a high-privileged authenticated administrator to execute arbitrary OS commands as root on the appliance node. Exploitation requires an administrative account with elevated privileges. The vulnerability affects versions prior to 9.5.0. The CVSS score is 7.2, indicating high severity.
Kiteworks Core contains a critical vulnerability in its password reset workflow that allows an unauthenticated attacker to reset a user's password without access to the reset email link. This flaw affects versions prior to 9.5.0 and can lead to full account takeover, including accounts with administrative privileges.
CVE-2026-102116 is a path traversal vulnerability in Kiteworks Email Protection Gateway that allows an authenticated administrator to write files outside intended directories. This can lead to execution of arbitrary files by the application, potentially resulting in remote code execution with the privileges of the service account.
CVE-2026-102117 is a high-severity vulnerability in Kiteworks Core affecting versions prior to 9.5.1. It allows an authenticated System Administrator with access to a key protecting submitted data to redirect the system's outbound support connection to an attacker-controlled destination. This redirection can lead to remote code execution with the privileges of a local service account.
CVE-2026-102118 is a local privilege escalation vulnerability in Kiteworks Core that allows an attacker with a low-privileged shell to escalate to root privileges on the appliance. The flaw involves improper link resolution before file access, categorized under CWE-59. It affects Kiteworks Core versions from 0 up to but not including 9.5.0. The vulnerability has a high severity with a CVSS score of 7.8.
CVE-2026-102119 is a path traversal vulnerability in the Kiteworks Email Protection Gateway affecting versions prior to 9.5.0. It exists in an optional, non-default administrative feature and allows an authenticated administrator to move files outside the intended directory. This could enable arbitrary code execution on the underlying system.
CVE-2026-102120 is a high-severity OS command injection vulnerability in Kiteworks Core affecting versions before 9.5.1. It allows an attacker with existing code execution on one cluster node to escalate privileges and execute OS commands on other nodes within the same cluster. The flaw arises from insufficient input validation in an internal cluster management function, which is not accessible externally and requires prior node access.
CVE-2026-102121 is a high-severity vulnerability in Kiteworks Secure Data Forms where an unauthenticated form-rendering interface exposes more data than intended. Published forms accessible to anonymous users could leak the form owner's account profile and some deployment configuration details, but no passwords, authentication tokens, or multi-factor authentication secrets were exposed.
Kiteworks Email Protection Gateway versions prior to 9.5.0 contain a Server-Side Request Forgery (SSRF) vulnerability. This flaw allows a remote, unauthenticated attacker to cause the gateway to send crafted requests to internal or unintended network destinations during an online certificate status check for inbound messages. Exploitation could lead to disclosure of sensitive internal information or disruption of gateway operations.
CVE-2026-102122 is an authorization vulnerability in Kiteworks Core where users with the Manager role on a shared folder could improperly assign the Owner role to themselves or others. This occurs due to incorrect enforcement of role assignment permissions. The vulnerability affects versions prior to 9.5.1. The CVSS score is 4.3, indicating medium severity with limited impact on integrity and no impact on confidentiality or availability.
CVE-2026-102123 is a path traversal vulnerability in the Kiteworks Core appliance setup interface. It allows an unauthenticated attacker to write files outside the intended directory, potentially compromising the appliance's integrity or causing denial of service. Exploitation requires network access to the setup interface, which is not accessible in the default fully configured appliance but may be reachable during initial provisioning or non-default configurations. The vulnerability affects Kiteworks Core versions prior to 9.5.0.