{"id":"CVE-2026-102102","published":"2026-09-30T21:16:57.000","lastModified":"2026-10-01T14:17:13.923","description":"Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Server-Side Request Forgery (SSRF). A server-side request forgery (SSRF) weakness in Kiteworks Email Protection Gateway could allow a remote, unauthenticated attacker to induce the gateway to issue crafted requests to internal or otherwise unintended network destinations. The requests are triggered while the gateway retrieves an issuer certificate in an inbound message. Depending on the services reachable from the gateway, this could disclose sensitive internal information or disrupt gateway operation.","cvssScore":9.1,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","cwes":["CWE-918"],"vendors":[],"products":[],"references":[{"url":"https://github.com/kiteworks/security-advisories/security/advisories/GHSA-jxv9-v53f-c79m","tags":[]},{"url":"https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/VA/white/2026/va-26-274-01.json","tags":[]}],"exploitRefs":[{"url":"https://github.com/kiteworks/security-advisories/security/advisories/GHSA-jxv9-v53f-c79m","tags":[]}],"hasPoc":true,"ai":{"summary":"The flaw allows a remote, unauthenticated attacker to induce the gateway to issue requests to internal network destinations, potentially disclosing sensitive information or disrupting the gateway operation.","exploitability":"Exploitation is relatively straightforward as it requires the attacker to craft specific inbound messages to trigger the SSRF vulnerability. The attacker must have access to send such messages to the gateway.","blast_radius":"If exploited, the vulnerability could lead to the disclosure of sensitive internal information or disruption of the gateway's operation, impacting internal network security and availability.","remediation":"Upgrade to Kiteworks Email Protection Gateway version 9.5.0 or later.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["ssrf","unauth","internal-disclosure","network-disruption"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-10-02T08:46:36.695Z"}}