CVE-2026-102097

7.2 HIGHpublic exploit available

Published 2026-09-30 · Updated 2026-10-01

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Remote Code Execution. Kiteworks Email Protection Gateway allowed an authenticated administrator to import configuration whose contents were not sufficiently validated before being processed. A crafted submission could potentially allow arbitrary commands to be executed on the affected gateway.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-22, CWE-94

Public exploit & PoC references

https://github.com/kiteworks/security-advisories/security/advisories/GHSA-465g-wpvm-8qmr

All references

https://github.com/kiteworks/security-advisories/security/advisories/GHSA-465g-wpvm-8qmr
https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/VA/white/2026/va-26-274-01.json

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

HIGHCVE-2026-105677PoC
HIGHCVE-2026-12171PoC
HIGHCVE-2026-46581PoC
UNSCOREDCVE-2026-54708PoC
HIGHCVE-2026-77271PoC
HIGHCVE-2014-125130PoC
HIGHCVE-2017-20284
HIGHCVE-2021-48011PoC

Related by shared AI tags and CWE weakness class. Browse the full archive.