What’s Vulnerable › Products

Kiteworks Email Protection Gateway vulnerabilities

83 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 80 published in the last 12 months.

Check whether your Kiteworks Email Protection Gateway version is affected

Latest Kiteworks Email Protection Gateway vulnerabilities

• CVE-2026-102150 — Kiteworks Secure Data Forms Missing Authentication for Critical Function (CVSS 7.2)
• CVE-2026-102149 — Kiteworks Email Protection Gateway Improper Access Control (CVSS 9.4)
• CVE-2026-102147 — Kiteworks Core Administrative Account Takeover through Stored Cross-site Scripting (XSS) (CVSS 9.3)
• CVE-2026-102146 — Kiteworks Email Protection Gateway Arbitrary File Write through Server-Side Template Injection (CVSS 6.5)
• CVE-2026-102145 — Kiteworks Core Server-Side Request Forgery through CRLF Injection (CVSS 6.6)
• CVE-2026-102144 — Kiteworks Email Protection Gateway Uncontrolled Resource Consumption (CVSS 5.3)
• CVE-2026-102143 — Kiteworks Email Protection Gateway Unrestricted Upload of File with Dangerous Type (CVSS 7.5)
• CVE-2026-102142 — Kiteworks Core Remote Code Execution through Server-Side Template Injection (CVSS 7.2)
• CVE-2026-102141 — Kiteworks Core Privilege Escalation through External Control of File Name or Path (CVSS 6.7)
• CVE-2026-102140 — Kiteworks Core Insufficient Verification of Data Authenticity (CVSS 4.9)
• CVE-2026-102139 — Kiteworks Email Protection Gateway Incorrect Authorization (CVSS 6.5)
• CVE-2026-102138 — Kiteworks Core Server-Side Request Forgery (SSRF) (CVSS 3.3)
• CVE-2026-102137 — Kiteworks Core Unrestricted Upload of File with Dangerous Type (CVSS 4.1)
• CVE-2026-102136 — Kiteworks Core Command Execution through Configuration Injection (CVSS 6.3)
• CVE-2026-102135 — Kiteworks Email Protection Gateway Deserialization of Untrusted Data (CVSS 6.6)
• CVE-2026-102134 — Kiteworks Core Unprotected Alternate Channel (CVSS 5.4)
• CVE-2026-102133 — Kiteworks Core Arbitrary File Write through Command Injection (CVSS 6.6)
• CVE-2026-102132 — Kiteworks Core Privilege Escalation through Improper Access Control (CVSS 7.2)
• CVE-2026-102131 — Kiteworks Email Protection Gateway Improper Handling of Case Sensitivity (CVSS 7.2)
• CVE-2026-102130 — Kiteworks Email Protection Gateway Remote Code Execution (CVSS 7.2)
• CVE-2026-102129 — Kiteworks Core Incorrect Privilege Assignment (CVSS 7.2)
• CVE-2026-102128 — Kiteworks Email Protection Gateway Improper Authentication (CVSS 7.5)
• CVE-2026-102127 — Kiteworks Email Protection Gateway Improper Restriction of XML External Entity Reference (CVSS 7.0)
• CVE-2026-102126 — Kiteworks Core Stored Cross-site Scripting (XSS) (CVSS 8.1)
• CVE-2026-102125 — Kiteworks Core Sandbox Escape (CVSS 8.8)