CVE-2026-102144: Kiteworks Email Protection Gateway Uncontrolled Resource Consumption
A resource exhaustion vulnerability in Kiteworks Email Protection Gateway allowed an unauthenticated remote attacker to repeatedly trigger a comparatively expensive server-side operation, causing a partial denial of service.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
An unauthenticated remote attacker can exploit it over the network. No credentials or user interaction are required.
What is the operational impact of a successful attack?
Repeated requests can trigger a comparatively expensive server-side operation and cause a partial denial of service. The available information indicates no confidentiality or integrity impact.
What should teams monitor for while assessing exposure?
Monitor for repeated requests that invoke expensive server-side processing, along with elevated resource usage or degraded gateway availability. The provided information does not identify a specific request pattern or affected configuration.