CVE-2026-102116GHSA-pf8p-p269-4mjv
Kiteworks Email Protection Gateway Path Traversal
Kiteworks Email Protection GatewayNetwork & edge
CVSS
7.2HighExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)1.96%Chance of exploitation activity in the next 30 days, higher than 80% of CVEs. Scored 23 Oct 2026FIRST EPSS
What fixes it
- 9.5.0Email Protection GatewayCVE List
A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.
Description
-A weakness could have allowed an authenticated Kiteworks Email Protection Gateway administrator to write a file outside its intended location and cause the application to execute it, potentially resulting in remote code execution as the underlying service account.
Text from CVE List
Affected versions 2
- Email Protection Gatewayaffected: all versions before 9.5.0CVE List
- Email Protection Gatewayunaffected: 9.5.0CVE List