CVE-2026-102145

6.6 MEDIUMpublic exploit available

Published 2026-09-30 · Updated 2026-10-01

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

An authenticated administrator could cause the server to issue requests to, and interact with, internal network services that are not meant to be reachable through this interface. On its own this did not result in code execution.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L

Weaknesses

CWE-93

Public exploit & PoC references

https://github.com/kiteworks/security-advisories/security/advisories/GHSA-h97r-j99c-q8xc

All references

https://github.com/kiteworks/security-advisories/security/advisories/GHSA-h97r-j99c-q8xc
https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/VA/white/2026/va-26-274-01.json

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

CRITICALCVE-2026-100717PoC
MEDIUMCVE-2026-102136PoC
UNSCOREDCVE-2026-102471PoC
UNSCOREDCVE-2026-102938PoC
MEDIUMCVE-2026-110835PoC
MEDIUMCVE-2026-111219PoC
HIGHCVE-2026-111220PoC
MEDIUMCVE-2026-111221PoC

Related by shared AI tags and CWE weakness class. Browse the full archive.