CVE-2026-102097

Kiteworks Email Protection Gateway remote code execution

Published Sep 30, 2026 CVSS 3.1 · 7.2 High EPSS 2.2% KEV · Not listed

Description

Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Remote Code Execution. Kiteworks Email Protection Gateway allowed an authenticated administrator to import configuration whose contents were not sufficiently validated before being processed. A crafted submission could potentially allow arbitrary commands to be executed on the affected gateway.

Analysis

Technical impact

An authenticated administrator can import configuration data that is not validated correctly, allowing execution of arbitrary commands on the gateway. The flaw exploits unsafe path handling (CWE-22) and code injection (CWE-94), which can lead to full compromise of the gateway and potentially connected services.

Affected Systems

The vulnerability affects Kiteworks Email Protection Gateway installations older than version 9.5.0. No other vendors or product lines are listed as impacted.

Risk and Exploitability

With a CVSS score of 7.2 the risk is considered high. The EPSS score is 2%, and the vulnerability is not listed in CISA's KEV catalog, indicating no publicly known exploitation yet. The attack requires privileged administrator access, so the likelihood of exploitation is reduced compared to an unauthenticated vector but remains significant in environments with unrestricted admin privileges.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Kiteworks

Email Protection Gateway

unknown

Version	Status	Constraints
`0`	affected	< 9.5.0
`9.5.0`	unaffected	—

Configuration 1 [-]

cpe:2.3:a:accellion:kiteworks:*:*:*:*:*:*:*:*

No data.

Vendor Product Versions

Kiteworks

Kiteworks Email Protection Gateway

Version	Status	Scheme	Platform
`[0,9.5.0)`	affected	generic	—
`9.5.0`	unaffected	semver	—

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

Upgrade or patch the gateway to version 9.5.0 or later to remove the validation flaw.
Restrict administrator accounts to trusted IP ranges and enable multi‑factor authentication to limit who can perform imports.
Disable or remove unnecessary administrative accounts and monitor import logs for suspicious configuration submissions.

Generated by OpenCVE AI on October 9, 2026 at 14:47 UTC.

Tracking

Advisories

No advisories available

Metrics

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: 2.2% (2.168% probability within 30 days)

Exploitation none

Automatable no

Technical Impact total

References

Link	Providers
https://github.com/kiteworks/security-advisories/security/advisories/GHSA-465g-wpvm-8qmr
https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/VA/white/2026/va-26-274-01.json

History

Oct 8, 2026 2:00 PM First appearance in the feed. Affected versions updated. Affected vendors updated View changes

Type	Values Removed	Values Added
First Time appeared		Accellion Accellion kiteworks
CPEs		cpe:2.3:a:accellion:kiteworks::::::::
Vendors & Products		Accellion Accellion kiteworks

Oct 1, 2026 3:45 PM First appearance in the feed. Affected vendors updated View changes

Type	Values Removed	Values Added
First Time appeared		Kiteworks Kiteworks kiteworks Email Protection Gateway
Vendors & Products		Kiteworks Kiteworks kiteworks Email Protection Gateway

Oct 1, 2026 2:30 PM Scoring metrics updated View changes

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Sep 30, 2026 8:30 PM Description updated. Title updated. Weaknesses updated. Added references. Scoring metrics updated View changes

Type	Values Removed	Values Added
Description		Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Remote Code Execution. Kiteworks Email Protection Gateway allowed an authenticated administrator to import configuration whose contents were not sufficiently validated before being processed. A crafted submission could potentially allow arbitrary commands to be executed on the affected gateway.
Title		Kiteworks Email Protection Gateway remote code execution
Weaknesses		CWE-22 CWE-94
References		https://github.com/kiteworks/security-advisories/security/advisories/GHSA-465g-wpvm-8qmr https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/VA/white/2026/va-26-274-01.json
Metrics		cvssV3_1 `{'score': 7.2, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'}`