Skip to content
OpenAdvisories
High · 7.2 CVE-2026-102116 EUVD-2026-90303

Kiteworks Email Protection Gateway Path Traversal

Published Sep 30, 2026 · Updated Oct 1, 2026 · Assigned by cisa-cg

Description

-A weakness could have allowed an authenticated Kiteworks Email Protection Gateway administrator to write a file outside its intended location and cause the application to execute it, potentially resulting in remote code execution as the underlying service account.

Affected products

VendorProductAffectedFixed
Kiteworks Email Protection Gateway < 9.5.0 9.5.0

Advisories 3

References

  • url vendor-advisory
  • url third-party-advisory