CVE-2026-102144: Kiteworks Email Protection Gateway Uncontrolled Resource Consumption

Published Sep 30, 2026

Updated

A resource exhaustion vulnerability in Kiteworks Email Protection Gateway allowed an unauthenticated remote attacker to repeatedly trigger a comparatively expensive server-side operation, causing a partial denial of service.

Affected Software

1 affected component

Kiteworks Email Protection Gateway

Event History

Sep 30, 2026

CVE Published

via MITRE·08:09 PM

Data Sourced

via MITRE·08:09 PM

DescriptionWeakness

Data Sourced

via NVD·09:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue?

An unauthenticated remote attacker can exploit it over the network. No credentials or user interaction are required.

What is the operational impact of a successful attack?

Repeated requests can trigger a comparatively expensive server-side operation and cause a partial denial of service. The available information indicates no confidentiality or integrity impact.

What should teams monitor for while assessing exposure?

Monitor for repeated requests that invoke expensive server-side processing, along with elevated resource usage or degraded gateway availability. The provided information does not identify a specific request pattern or affected configuration.

CVE-2026-102144: Kiteworks Email Protection Gateway Uncontrolled Resource Consumption

Affected Software

Event History

Frequently Asked Questions

Who can exploit this issue?

What is the operational impact of a successful attack?

What should teams monitor for while assessing exposure?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What is the operational impact of a successful attack?

What should teams monitor for while assessing exposure?