CVE-2026-102143

7.5 Élevée

Publiée le 30/09/2026 à 23:17 · Modifiée le 13/10/2026 à 13:58 · Analysée par le NVD · Source : 9119a7d8-5eab-497f-8521-727c672e3725

Description

An unauthenticated attacker could cause a file with attacker-controlled content to be written to the appliance filesystem through an administrative upload handler that did not properly authenticate the request. This did not by itself result in code execution, which would require a separate vulnerability to place the file in an executable location.

Traduire en français

Produits concernés

Kiteworks Email Protection Gateway
Accellion kiteworks

Scores CVSS

Version	Score	Source	Vecteur
3.1	7.5 Élevée	9119a7d8-5eab-497f-8521-727c672e3725	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N`

Faiblesses (CWE)

CWE-306
CWE-434

Références

https://github.com/kiteworks/security-advisories/security/advisories/GHSA-3p9g-jh62-8f89 Vendor Advisory
https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/VA/white/2026/va-26-274-01.json Broken Link

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories