7.2High

CVE-2026-102116Kiteworks Email Protection Gateway Path Traversal

Kiteworks Email Protection Gateway Published: (1 month ago)

Description

-A weakness could have allowed an authenticated Kiteworks Email Protection Gateway administrator to write a file outside its intended location and cause the application to execute it, potentially resulting in remote code execution as the underlying service account.

Weakness (CWE): CWE-22CWE-91

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

VendorProductVersions
accellion kiteworks < 9.5.0
Kiteworks Email Protection Gateway < 9.5.0, fixed 9.5.0

References and patches

  • url vendor-advisoryVendor Advisory
  • url third-party-advisoryBroken Link

CPE matches (NVD) (1)

  • cpe:2.3:a:accellion:kiteworks:*:*:*:*:*:*:*:* < 9.5.0