CVE-2026-102105

Summary

The flaw allows a remote, unauthenticated attacker to induce the Kiteworks Email Protection Gateway to issue requests to unintended internal network destinations, potentially disclosing sensitive information or triggering unintended actions.

Exploitability

Exploitation is relatively straightforward as it requires the attacker to manipulate message content that references external resources, which is a common scenario in email processing.

Blast radius

If exploited, the attacker could gain access to sensitive internal information or trigger unintended actions on internal systems, impacting the entire network.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Kiteworks Email Protection Gateway version 9.5.0 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.