CVE-2026-102105: Kiteworks Email Protection Gateway server-side request forgery
Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Server-Side Request Forgery (SSRF). A server-side request forgery (SSRF) weakness in Kiteworks Email Protection Gateway could allow a remote, unauthenticated attacker to induce the gateway to issue crafted requests to internal or otherwise unintended network destinations. The requests are triggered while the gateway renders message content that references external resources. Depending on the services reachable from the gateway, this could disclose sensitive internal information or trigger unintended actions on internal systems.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Kiteworks Email Protection Gatewayto a version that resolves this vulnerability.Fixed in 9.5.0
Event History
Frequently Asked Questions
Which deployments are affected?
Kiteworks Email Protection Gateway versions earlier than 9.5.0 are affected. The issue is triggered when the gateway renders message content that references external resources.
Does an attacker need credentials or user interaction to exploit this?
No. The vulnerability is remotely exploitable without authentication or user interaction.
What systems or data could be at risk?
Risk depends on which internal or unintended network destinations the gateway can reach. Crafted server-side requests could disclose sensitive internal information or cause unintended actions on reachable internal services.