Mmastodon TechnologyCybersecurity first seen 17 h ago, last 17 h ago, peak #11

Critical SSRF vulnerability disclosed in Kiteworks Email Protection Gateway

Original: 🚨 CVE-2026-102105 — CVSS 9.1 CRITICAL Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Server-Si

A critical vulnerability, CVE-2026-102105, has been disclosed in Kiteworks Email Protection Gateway versions before 9.5.0. The flaw, rated CVSS 9.1, is a server-side request forgery that could let a remote, unauthenticated attacker send requests from the affected server. Security teams are being urged to update to version 9.5.0 or later to close the issue.

Why now: A critical-rated, remotely exploitable flaw in a widely used email security product demands immediate patching by security teams.

KiteworksCVE-2026-102105

Open on mastodon →

Evidence

• 🚨 CVE-2026-102105 — CVSS 9.1 CRITICAL Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Server-Side Request Forgery (SSRF). A server-side request forgery (SSRF) weakness in Kiteworks Email Protection Gateway could allow a remote, unauthenticated attacker… · stemshop

API: https://socialmediatrends-api.osmike.com/v1/trends/535091