Mmastodon TechnologyCybersecurity first seen 19 h ago, last 19 h ago, peak #10

Critical Kiteworks Email Protection Gateway flaw disclosed

Original: 🚨 CVE-2026-102106 — CVSS 9.1 CRITICAL Improper authentication in a Kiteworks Email Protection Gateway administrative ser

A critical vulnerability, CVE-2026-102106, has been disclosed in Kiteworks Email Protection Gateway, rated CVSS 9.1. The flaw involves improper authentication: an administrative service did not consistently enforce administrator authentication, meaning the required password check could be bypassed. Security researchers are flagging the issue as it could allow unauthorized administrative access to the gateway, potentially exposing sensitive email protection infrastructure.

Why now: A newly disclosed critical vulnerability with a high severity score raises immediate concern among security professionals.

KiteworksCVE-2026-102106Kiteworks Email Protection Gateway

Open on mastodon →

Evidence

• 🚨 CVE-2026-102106 — CVSS 9.1 CRITICAL Improper authentication in a Kiteworks Email Protection Gateway administrative service. An administrative service in Kiteworks Email Protection Gateway did not consistently enforce administrator authentication, so the required password… · stemshop

API: https://socialmediatrends-api.osmike.com/v1/trends/535090