CVE-2026-102103

Summary

The flaw allows a remote, unauthenticated attacker to induce the gateway to issue crafted requests to internal network destinations, potentially disclosing sensitive information or disrupting gateway operation.

Exploitability

Exploitation is relatively straightforward as it requires no authentication and can be triggered during normal operation.

Blast radius

If exploited, the attacker could gain access to sensitive internal information or disrupt the gateway's operation, impacting internal network security and availability.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Kiteworks Email Protection Gateway version 9.5.0 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.