CVE-2026-102102

Summary

The flaw allows a remote, unauthenticated attacker to induce the gateway to issue requests to internal network destinations, potentially disclosing sensitive information or disrupting the gateway operation.

Exploitability

Exploitation is relatively straightforward as it requires the attacker to craft specific inbound messages to trigger the SSRF vulnerability. The attacker must have access to send such messages to the gateway.

Blast radius

If exploited, the vulnerability could lead to the disclosure of sensitive internal information or disruption of the gateway's operation, impacting internal network security and availability.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Kiteworks Email Protection Gateway version 9.5.0 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.