Veille CVE

Mercredi 7 octobre 2026

3 CVE

Critique 1 Élevée 0 Moyenne 2 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Kiteworks Email Protection Gateway » ✕
  1. CVE-2026-102149 9.4 Critique

    Kiteworks Email Protection Gateway · Accellion kiteworks

    Kiteworks Email Protection Gateway did not sufficiently restrict which account a certificate could be assigned to. This could allow an attacker to associate a certificate with another user's account, affecting the confidentiality and integrity of that account's encrypted mail and, where certificate-based login is enabled, potentially permitting unauthorized access to the account.

  2. CVE-2026-102144 5.3 Moyenne

    Kiteworks Email Protection Gateway · Accellion kiteworks

    A resource exhaustion vulnerability in Kiteworks Email Protection Gateway allowed an unauthenticated remote attacker to repeatedly trigger a comparatively expensive server-side operation, causing a partial denial of service.

  3. CVE-2026-102139 6.5 Moyenne

    Kiteworks Email Protection Gateway · Accellion kiteworks

    An authorization check in the large file exchange feature of Kiteworks Email Protection Gateway did not correctly establish that the requesting user was a party to the package being requested. An authenticated user of that optional feature could read the subject, message body, and attachments of packages they neither sent nor received.