CVE-2026-102135: Kiteworks Email Protection Gateway Deserialization of Untrusted Data
On a Kiteworks Email Protection Gateway cluster with database replication enabled, a party trusted by the cluster could submit a crafted serialized object that was deserialized without sufficient validation, potentially allowing code execution as the gateway service account. Replication is disabled by default, and exploitation requires control of a trusted cluster peer or administrative access to the appliance.
Affected Software
Event History
Frequently Asked Questions
Are default deployments affected?
No. The vulnerable replication feature is disabled by default; exposure requires a cluster with database replication enabled.
What level of access does an attacker need to exploit this?
The attacker must either control a trusted cluster peer or have administrative access to the appliance. Network reachability alone is not sufficient.
What is the likely impact if exploitation succeeds?
A crafted serialized object could lead to code execution as the gateway service account, with potential impact to confidentiality, integrity, and availability.