{"id":"CVE-2026-102128","published":"2026-09-30T21:17:01.270","lastModified":"2026-10-01T14:17:17.143","description":"An identity-verification weakness in Kiteworks Email Protection Gateway allowed the gateway to act on the Kiteworks platform on behalf of a user it had not authenticated, and to provision a platform account for an identity it did not already know. A remote, unauthenticated sender could potentially exploit this to obtain control of a platform account.","cvssScore":7.5,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","cwes":["CWE-287"],"vendors":[],"products":[],"references":[{"url":"https://github.com/kiteworks/security-advisories/security/advisories/GHSA-qjvp-25r3-rgx6","tags":[]},{"url":"https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/VA/white/2026/va-26-274-01.json","tags":[]}],"exploitRefs":[{"url":"https://github.com/kiteworks/security-advisories/security/advisories/GHSA-qjvp-25r3-rgx6","tags":[]}],"hasPoc":true,"ai":{"summary":"The Kiteworks Email Protection Gateway has a flawed authentication mechanism that allows unauthenticated attackers to impersonate users and create platform accounts without proper verification. This creates a critical risk of unauthorized account access and privilege escalation.","exploitability":"Exploitation requires sending specially crafted email messages to the gateway, but no authentication is needed to trigger the account provisioning or impersonation functionality, making it moderately difficult to exploit with a remote attack vector.","blast_radius":"If exploited, this vulnerability could allow attackers to gain full control over user accounts and potentially escalate privileges across the Kiteworks platform, affecting multiple users and their data.","remediation":"Disable the affected email protection gateway functionality until a patch is available, or restrict access to the gateway endpoint to known trusted IP ranges.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["auth-bypass","email","gateway","identity-verification"],"model":"garnet-coder","analyzedAt":"2026-10-13T09:07:53.394Z"}}