CVE-2026-102102: Kiteworks Email Protection Gateway server-side request forgery

Q: Which deployments are affected?

Kiteworks Email Protection Gateway versions before 9.5.0 are affected. The vulnerable behavior occurs when the gateway retrieves an issuer certificate from an inbound message.

Q: Does exploitation require authentication or user interaction?

No. The vulnerability can be exploited remotely by an unauthenticated attacker, and no user interaction is required.

Q: What access or impact could an attacker obtain?

An attacker can cause the gateway to send crafted requests to internal or other unintended network destinations reachable from the gateway. This may expose sensitive internal information or disrupt gateway operation.

Q: What version addresses the issue?

Version 9.5.0 is the first version identified as not affected; versions before 9.5.0 are vulnerable.

Published Sep 30, 2026

Updated

Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Server-Side Request Forgery (SSRF). A server-side request forgery (SSRF) weakness in Kiteworks Email Protection Gateway could allow a remote, unauthenticated attacker to induce the gateway to issue crafted requests to internal or otherwise unintended network destinations. The requests are triggered while the gateway retrieves an issuer certificate in an inbound message. Depending on the services reachable from the gateway, this could disclose sensitive internal information or disrupt gateway operation.

Affected Software

1 affected component

Kiteworks Email Protection Gateway<9.5.0

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Kiteworks Email Protection Gateway to a version that resolves this vulnerability.
Fixed in 9.5.0

Event History

Sep 30, 2026

CVE Published

via MITRE·08:12 PM

Data Sourced

via MITRE·08:12 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·09:16 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Which deployments are affected?

Kiteworks Email Protection Gateway versions before 9.5.0 are affected. The vulnerable behavior occurs when the gateway retrieves an issuer certificate from an inbound message.

Does exploitation require authentication or user interaction?

No. The vulnerability can be exploited remotely by an unauthenticated attacker, and no user interaction is required.

What access or impact could an attacker obtain?

An attacker can cause the gateway to send crafted requests to internal or other unintended network destinations reachable from the gateway. This may expose sensitive internal information or disrupt gateway operation.

What version addresses the issue?

Version 9.5.0 is the first version identified as not affected; versions before 9.5.0 are vulnerable.

CVE-2026-102102: Kiteworks Email Protection Gateway server-side request forgery

Affected Software

Remediation

Event History

Frequently Asked Questions

Which deployments are affected?

Does exploitation require authentication or user interaction?

What access or impact could an attacker obtain?

What version addresses the issue?

Company

Resources

Contact

Frequently Asked Questions

Which deployments are affected?

Does exploitation require authentication or user interaction?

What access or impact could an attacker obtain?

What version addresses the issue?