Mmastodon TechnologyCybersecurity first seen 1 d ago, last 1 d ago, peak #12

Critical SSRF flaw reported in Kiteworks Email Protection Gateway

Original: 🚨 CVE-2026-102104 — CVSS 9.1 CRITICAL Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Server-Si

A critical vulnerability, tracked as CVE-2026-102104 with a CVSS score of 9.1, has been disclosed in Kiteworks Email Protection Gateway versions before 9.5.0. The flaw is a server-side request forgery (SSRF) issue that could allow a remote, unauthenticated attacker to manipulate the gateway. Security teams are being urged to check whether their deployments are affected and update to version 9.5.0 or later.

Why now: Security professionals are alerting others to a newly disclosed critical vulnerability that organizations using Kiteworks should patch immediately.

KiteworksCVE-2026-102104Kiteworks Email Protection Gateway

Open on mastodon →

Evidence

• 🚨 CVE-2026-102104 — CVSS 9.1 CRITICAL Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Server-Side Request Forgery (SSRF). A server-side request forgery (SSRF) weakness in Kiteworks Email Protection Gateway could allow a remote, unauthenticated attacker… · stemshop

API: https://socialmediatrends-api.osmike.com/v1/trends/535092