CVE-2026-102089

7.2 HIGHpublic exploit available

Published 2026-09-30 · Updated 2026-10-01

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to a path traversal weakness in an administrative import function allowed an authenticated administrator to write files to arbitrary locations on the server. This could potentially be leveraged to execute arbitrary code on the underlying system.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-22

Public exploit & PoC references

https://github.com/kiteworks/security-advisories/security/advisories/GHSA-p853-p65q-2vc8

All references

https://github.com/kiteworks/security-advisories/security/advisories/GHSA-p853-p65q-2vc8
https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/VA/white/2026/va-26-274-01.json

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

HIGHCVE-2014-125130PoC
HIGHCVE-2017-20284
HIGHCVE-2021-48011PoC
HIGHCVE-2023-54403PoC
MEDIUMCVE-2024-58386PoC
HIGHCVE-2024-58387PoC
HIGHCVE-2024-58388PoC
MEDIUMCVE-2025-1280

Related by shared AI tags and CWE weakness class. Browse the full archive.