CVE-2026-102143
Kiteworks Email Protection Gateway Unrestricted Upload of File with Dangerous Type
- State
- Published
- Severity
- 7.5 High
- Published
- Sep 30, 2026
- Updated
- Oct 1, 2026
- Reserved
- Sep 28, 2026
Description
An unauthenticated attacker could cause a file with attacker-controlled content to be written to the appliance filesystem through an administrative upload handler that did not properly authenticate the request. This did not by itself result in code execution, which would require a separate vulnerability to place the file in an executable location.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 7.5 High | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N | cisa-cg |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
Email Protection GatewayKiteworks |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.