CVE-2026-102149

Summary

The flaw in Kiteworks Email Protection Gateway allows an attacker to associate a certificate with another user's account, compromising the confidentiality and integrity of the account's encrypted mail and potentially enabling unauthorized access.

Exploitability

Exploitation requires access to the certificate management interface and knowledge of the target account, making it moderately difficult.

Blast radius

If exploited, the impact could be severe, affecting the confidentiality and integrity of the targeted user's email communications and potentially granting unauthorized access to their account.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Disable certificate management functionality until a patch is available or upgrade to the latest version of Kiteworks Email Protection Gateway.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.