High severity7.2NVD Advisory· Published Sep 30, 2026

CVE-2026-102130

Description

Kiteworks Email Protection Gateway did not sufficiently validate the content of an uploaded backup, and allowed an administrator to influence how the application loaded it. An authenticated administrator could potentially use this to execute arbitrary code on the gateway as the underlying service account.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Kiteworks/Kiteworks Email Protection Gatewayllm-fuzzy

Patches

Vulnerability mechanics

References

github.com/kiteworks/security-advisories/security/advisories/GHSA-m92m-q8cf-rcchnvd
raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/VA/white/2026/va-26-274-01.jsonnvd

News mentions

No linked articles in our index yet.

cvss	0.468
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000