All vulnerabilities
CVE-2026-102144GHSA-wwhf-5862-rjxq

Kiteworks Email Protection Gateway Uncontrolled Resource Consumption

Kiteworks Email Protection GatewayNetwork & edge
Open in ThreatlineRecord JSON
CVSS
5.3Medium
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.36%Chance of exploitation activity in the next 30 days, higher than 28% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in9.5.1Fixed versionCVE List
Published30 Sep 2026Updated 2 Oct 2026CVE List

What fixes it

  • 9.5.1Email Protection GatewayCVE List
  • 9.5.1Kiteworks Email Protection Gateway, otherGitHub

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

A resource exhaustion vulnerability in Kiteworks Email Protection Gateway allowed an unauthenticated remote attacker to repeatedly trigger a comparatively expensive server-side operation, causing a partial denial of service.

Text from CVE List

Affected versions 3

  • Email Protection Gatewayaffected: all versions before 9.5.1CVE List
  • Email Protection Gatewayunaffected: 9.5.1CVE List
  • Kiteworks Email Protection Gateway, other< 9.5.1GitHub

References 2