{"id":"CVE-2026-102104","published":"2026-09-30T21:16:57.250","lastModified":"2026-10-01T14:17:14.170","description":"Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Server-Side Request Forgery (SSRF). A server-side request forgery (SSRF) weakness in Kiteworks Email Protection Gateway could allow a remote, unauthenticated attacker to induce the gateway to issue crafted requests to internal or otherwise unintended network destinations. The requests are triggered while the gateway performs an online certificate status check for an inbound message. Depending on the services reachable from the gateway, this could disclose sensitive internal information or disrupt gateway operation.","cvssScore":9.1,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","cwes":["CWE-918"],"vendors":[],"products":[],"references":[{"url":"https://github.com/kiteworks/security-advisories/security/advisories/GHSA-mqw3-m87w-4fx4","tags":[]},{"url":"https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/VA/white/2026/va-26-274-01.json","tags":[]}],"exploitRefs":[{"url":"https://github.com/kiteworks/security-advisories/security/advisories/GHSA-mqw3-m87w-4fx4","tags":[]}],"hasPoc":true,"ai":{"summary":"The flaw allows a remote, unauthenticated attacker to induce the gateway to make requests to internal network destinations, potentially disclosing sensitive information or disrupting operations.","exploitability":"Exploitation is relatively straightforward as it requires crafting specific requests during the online certificate status check process. The attacker must be able to send an inbound message to the gateway.","blast_radius":"If exploited, this could lead to the disclosure of sensitive internal information or disruption of the gateway's operation, impacting internal network security and availability.","remediation":"Upgrade to Kiteworks Email Protection Gateway version 9.5.0 or later.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["ssrf","internal-disclosure","network-destinations"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-10-02T08:46:39.698Z"}}