Description
Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Server-Side Request Forgery (SSRF). A server-side request forgery (SSRF) weakness in Kiteworks Email Protection Gateway could allow a remote, unauthenticated attacker to induce the gateway to issue crafted requests to internal or otherwise unintended network destinations. The requests are triggered while the gateway renders message content that references external resources. Depending on the services reachable from the gateway, this could disclose sensitive internal information or trigger unintended actions on internal systems.
Published: 2026-09-30
Score: 9.1 Critical
EPSS: < 1% Very Low
KEV: No
Impact: Remote Server‑Side Request Forgery potentially exposing internal information or triggering actions
Action: Apply Patch
AI Analysis

Impact

Kiteworks Email Protection Gateway prior to version 9.5.0 contains a server‑side request forgery flaw that enables a remote, unauthenticated attacker to compel the gateway to send crafted HTTP requests while rendering external resource references. This can expose sensitive internal data or invoke unintended operations on systems reachable from the gateway.

Affected Systems

The affected system is Kiteworks Email Protection Gateway, any installation using a version older than 9.5.0.

Risk and Exploitability

The flaw has a CVSS score of 9.1, indicating high‑severity risk. EPSS data is unavailable, and the vulnerability is not listed in the CISA KEV catalog. The exploit requires the attacker to access the gateway and supply message content that references external URLs; authentication is not required. Once triggered, the gateway may reach internal network services, revealing information or executing commands.

Generated by OpenCVE AI on September 30, 2026 at 21:44 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Apply the vendor patch to upgrade to version 9.5.0 or later.
  • If an immediate patch is unavailable, block outbound traffic from the Email Protection Gateway to internal or restricted network ranges.
  • Implement network segmentation or firewall rules to restrict the gateway’s outbound connections to only necessary external destinations.

Generated by OpenCVE AI on September 30, 2026 at 21:44 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 08 Oct 2026 14:00:00 +0000

Type Values Removed Values Added
First Time appeared Accellion
Accellion kiteworks
CPEs cpe:2.3:a:accellion:kiteworks:*:*:*:*:*:*:*:*
Vendors & Products Accellion
Accellion kiteworks

Thu, 01 Oct 2026 15:45:00 +0000

Type Values Removed Values Added
First Time appeared Kiteworks
Kiteworks kiteworks Email Protection Gateway
Vendors & Products Kiteworks
Kiteworks kiteworks Email Protection Gateway

Thu, 01 Oct 2026 14:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Wed, 30 Sep 2026 20:45:00 +0000

Type Values Removed Values Added
Description Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Server-Side Request Forgery (SSRF). A server-side request forgery (SSRF) weakness in Kiteworks Email Protection Gateway could allow a remote, unauthenticated attacker to induce the gateway to issue crafted requests to internal or otherwise unintended network destinations. The requests are triggered while the gateway renders message content that references external resources. Depending on the services reachable from the gateway, this could disclose sensitive internal information or trigger unintended actions on internal systems.
Title Kiteworks Email Protection Gateway server-side request forgery
Weaknesses CWE-918
References
Metrics cvssV3_1

{'score': 9.1, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N'}

Subscriptions

Accellion Kiteworks
Kiteworks Kiteworks Email Protection Gateway
cve-icon MITRE

Status: PUBLISHED

Assigner: cisa-cg

Published:

Updated: 2026-10-01T13:37:00.934Z

Reserved: 2026-09-28T17:39:13.561Z

Link: CVE-2026-102105

cve-icon Vulnrichment

Updated: 2026-10-01T13:31:24.519Z

cve-icon NVD

Status : Analyzed

Published: 2026-09-30T21:16:57.370

Modified: 2026-10-08T13:43:21.870

Link: CVE-2026-102105

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-01T15:30:08Z

Weaknesses
  • CWE-918

    Server-Side Request Forgery (SSRF)