Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Server-Side Request Forgery (SSRF). A server-side request forgery (SSRF) weakness in Kiteworks Email Protection Gateway could allow a remote, unauthenticated attacker to induce the gateway to issue crafted requests to internal or otherwise unintended network destinations. The requests are triggered while the gateway retrieves an issuer certificate in an inbound message. Depending on the services reachable from the gateway, this could disclose sensitive internal information or disrupt gateway operation.
Critical 9.1
CVE-2026-102102
Accellion Kiteworks — server-side request forgery.
Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Server-Side Request Forgery (SSRF).
Published Updated Source NVD
CVSS 3.1
9.1
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Exploit chance, 30 days
0.8%
Higher than 57% of all CVEs (EPSS)
Status
No known exploitation
Not in CISA KEV
Patch
Unknown
Check the vendor advisory
What happened
What to do
- 01Check whether you run Accellion Kiteworks, and which version.
- 02Follow the vendor advisory for a fix or a workaround.
References
Timeline · UTC
- Published to NVD
- NVD record updated
Also actively exploited
Other CVEs in Accellion Kiteworks
8 more CVEs
9.3Accellion Kiteworks — cross-site scripting.EPSS 0.5%9.4Accellion Kiteworks — missing authentication.EPSS 0.2%9.8Accellion Kiteworks — An unauthenticated attacker who knew the email address of a user with a locally stored password…EPSS 1.0%9.1Accellion Kiteworks — server-side request forgery.EPSS 0.7%9.1Accellion Kiteworks — server-side request forgery.EPSS 0.7%9.1Accellion Kiteworks — server-side request forgery.EPSS 0.5%