Veille CVE

Mardi 13 octobre 2026

3 CVE

Critique 0 Élevée 2 Moyenne 1 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Kiteworks Email Protection Gateway » ✕
  1. CVE-2026-102119 7.2 Élevée

    Kiteworks Email Protection Gateway · Accellion kiteworks

    A path traversal weakness in an optional, non-default administrative feature allowed an authenticated administrator to move files to unintended locations outside the feature's designated directory. This could potentially be leveraged to execute arbitrary code on the underlying system.

  2. CVE-2026-102143 7.5 Élevée

    Kiteworks Email Protection Gateway · Accellion kiteworks

    An unauthenticated attacker could cause a file with attacker-controlled content to be written to the appliance filesystem through an administrative upload handler that did not properly authenticate the request. This did not by itself result in code execution, which would require a separate vulnerability to place the file in an executable location.

  3. CVE-2026-102146 6.5 Moyenne

    Kiteworks Email Protection Gateway · Accellion kiteworks

    An authenticated Email Protection Gateway administrator holding only limited, delegated permissions could write files with attacker-controlled content to arbitrary locations accessible to the Email Protection Gateway service account. This exceeds the administrator's intended privileges and could be used to alter application files and configuration or to disrupt the availability of the service.