Skip to content

RadicalNotion.AI

We do not sell or share your personal information.

© 2026 RadicalNotion.AI

Security Data

CWE Directory
CAPEC Directory
CNA Directory
CNA Leaderboard
CNA Report Cards
Vendor Directory
Patched Functions
Data Sources

Calculators

CVSS Calculator
CVSS 4.0
CVSS 3.1
CVSS 3.0
CVSS 2.0
Badge Builder

Platform

My Vulnerabilities
Insights
Notifications
Pricing

Learn

Guides
What is a CVE?
What is CVSS?
The CISA KEV catalog
What is EPSS?

Company

About
Blog
Careers
Contact
Demo

Account

Sign up
Log in

Legal

Security
Privacy
Terms

RadicalNotion.AI

Security data

Weaknesses (CWE)The MITRE CWE weakness catalog
Attack Patterns (CAPEC)MITRE CAPEC attack patterns
CNAsNumbering authorities and report cards
VendorsVulnerabilities by vendor
Patched FunctionsWhere CVE fixes land in code

Tools

CVSS CalculatorScore CVSS 4.0, 3.1, 3.0 & 2.0
Badge BuilderEmbeddable SVG badges for READMEs

Resources

LearnSecurity guides
Data SourcesCVE data sources

About Blog Pricing Demo

Log in Create an account

Home
Vendors
Kiteworks
Email Protection Gateway

Kiteworks Email Protection Gateway Vulnerabilities: CVEs, CISA KEV & Security Advisories

22 CVEs

Kiteworks Email Protection Gateway Vulnerabilities

CVE security advisories and vulnerability history for Email Protection Gateway by Kiteworks.

22

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

7.7

Avg CVSS

2026–2026

Last updated September 30, 2026

Overview

Kiteworks Email Protection Gateway has 22 published CVE records since 2026, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 7.7.

Severity and exploitation

How the CVSS severity of Kiteworks Email Protection Gateway's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical7

High11

Medium4

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of Kiteworks Email Protection Gateway's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No Kiteworks Email Protection Gateway CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every Kiteworks Email Protection Gateway version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 9.5.013 CVEs
>= 9.5.013 CVEs
< 9.5.19 CVEs
>= 9.5.19 CVEs

Fixed in

9.5.013 CVEs
9.5.19 CVEs

Find a version

22 CVEs

Sort

Kiteworks Email Protection Gateway server-side request forgery
CVE-2026-102105
Patch
CWE-918
Critical · CVSS 9.1
EPSS 0.5% (43th pct)2026-09-30
Kiteworks Email Protection Gateway improper authentication
CVE-2026-102106
Patch
CWE-287
Critical · CVSS 9.1
EPSS 1.1% (64th pct)2026-09-30
Kiteworks Email Protection Gateway deserialization of untrusted data
CVE-2026-102108
Patch
CWE-502
High · CVSS 7.2
EPSS 1.5% (73th pct)2026-09-30
Kiteworks Email Protection Gateway Path Traversal
CVE-2026-102116
Patch
CWE-22
High · CVSS 7.2
EPSS 2.0% (80th pct)2026-09-30
Kiteworks Email Protection Gateway Path Traversal
CVE-2026-102119
Patch
CWE-22
High · CVSS 7.2
EPSS 1.4% (72th pct)2026-09-30
Kiteworks Email Protection Gateway server-side request forgery
CVE-2026-102104
Patch
CWE-918
Critical · CVSS 9.1
EPSS 0.7% (53th pct)2026-09-30
Kiteworks Email Protection Gateway server-side request forgery
CVE-2026-102103
Patch
CWE-918
Critical · CVSS 9.1
EPSS 0.7% (53th pct)2026-09-30
Kiteworks Email Protection Gateway Improper Restriction of XML External Entity Reference
CVE-2026-102127
Patch
CWE-611
High · CVSS 7.0
EPSS 0.2% (8th pct)2026-09-30
Kiteworks Email Protection Gateway Improper Authentication
CVE-2026-102128
Patch
CWE-287
High · CVSS 7.5
EPSS 0.2% (10th pct)2026-09-30
Kiteworks Email Protection Gateway Remote Code Execution
CVE-2026-102130
Patch
CWE-94
High · CVSS 7.2
EPSS 1.2% (67th pct)2026-09-30
Kiteworks Email Protection Gateway Improper Handling of Case Sensitivity
CVE-2026-102131
Patch
CWE-94
High · CVSS 7.2
EPSS 1.2% (67th pct)2026-09-30
Kiteworks Email Protection Gateway server-side request forgery
CVE-2026-102102
Patch
CWE-918
Critical · CVSS 9.1
EPSS 0.8% (56th pct)2026-09-30
Kiteworks Email Protection Gateway Deserialization of Untrusted Data
CVE-2026-102135
Patch
CWE-502
Medium · CVSS 6.6
EPSS 1.3% (69th pct)2026-09-30
Kiteworks Email Protection Gateway Incorrect Authorization
CVE-2026-102139
Patch
CWE-639
Medium · CVSS 6.5
EPSS 0.4% (32th pct)2026-09-30
Kiteworks Email Protection Gateway Unrestricted Upload of File with Dangerous Type
CVE-2026-102143
Patch
CWE-306
High · CVSS 7.5
EPSS 0.3% (24th pct)2026-09-30
Kiteworks Email Protection Gateway Uncontrolled Resource Consumption
CVE-2026-102144
Patch
CWE-306
Medium · CVSS 5.3
EPSS 0.4% (29th pct)2026-09-30
Kiteworks Email Protection Gateway Improper Access Control
CVE-2026-102149
Patch
CWE-306
Critical · CVSS 9.4
EPSS 0.2% (14th pct)2026-09-30
Kiteworks Email Protection Gateway Arbitrary File Write through Server-Side Template Injection
CVE-2026-102146
Patch
CWE-73
Medium · CVSS 6.5
EPSS 1.0% (62th pct)2026-09-30
Kiteworks Email Protection Gateway remote code execution
CVE-2026-102097
Patch
CWE-22
High · CVSS 7.2
EPSS 2.2% (82th pct)2026-09-30
Kiteworks Email Protection Gateway server-side request forgery
CVE-2026-102095
Patch
CWE-918
Critical · CVSS 9.1
EPSS 0.4% (34th pct)2026-09-30
Kiteworks Email Protection Gateway unsafe reflection
CVE-2026-102094
Patch
CWE-470
High · CVSS 7.2
EPSS 1.5% (73th pct)2026-09-30
Kiteworks Email Protection Gateway path traversal
CVE-2026-102089
Patch
CWE-22
High · CVSS 7.2
EPSS 1.5% (75th pct)2026-09-30

Common weakness types

The CWE weakness categories most often found in Kiteworks Email Protection Gateway CVEs. Follow any weakness for its full explanation.

CWE-918Server-Side Request Forgery (SSRF)5 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')4 CVEs
CWE-306Missing Authentication for Critical Function3 CVEs
CWE-94Improper Control of Generation of Code ('Code Injection')2 CVEs
CWE-287Improper Authentication2 CVEs
CWE-502Deserialization of Untrusted Data2 CVEs
CWE-639Authorization Bypass Through User-Controlled Key1 CVE
CWE-73External Control of File Name or Path1 CVE

Other Kiteworks products

Browse vulnerabilities for other products by Kiteworks.

Core36 CVEs Secure Data Forms15 CVEs security-advisories10 CVEs totemomail2 CVEs Kiteworks Email Protection Gateway1 CVEs owncloud1 CVEs

All Kiteworks vulnerabilities

Frequently asked questions

Common questions about Kiteworks Email Protection Gateway vulnerabilities.

How many CVEs does Kiteworks Email Protection Gateway have?: Kiteworks Email Protection Gateway has 22 published CVE records since 2026.
How many Kiteworks Email Protection Gateway CVEs are in CISA KEV?: None of Kiteworks Email Protection Gateway's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Kiteworks Email Protection Gateway vulnerabilities?: No Kiteworks Email Protection Gateway CVEs currently have a tracked public exploit in this dataset.
Which versions of Kiteworks Email Protection Gateway are affected?: 6 distinct Kiteworks Email Protection Gateway versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Kiteworks Email Protection Gateway CVEs?: Kiteworks Email Protection Gateway's CVEs most often map to these CWE weakness types: CWE-918 (Server-Side Request Forgery (SSRF)), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-306 (Missing Authentication for Critical Function), CWE-94 (Improper Control of Generation of Code ('Code Injection')).
How many critical Kiteworks Email Protection Gateway vulnerabilities are there?: Kiteworks Email Protection Gateway has 7 critical and 11 high-severity CVEs.
What is the average severity of Kiteworks Email Protection Gateway CVEs?: The average CVSS base score across Kiteworks Email Protection Gateway's scored CVEs is 7.7.

References

All Kiteworks vulnerabilities
The MITRE CVE Program (opens in a new tab)
Learn: What is a CVE?
CWE directory: the weakness types these CVEs map to

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Kiteworks Email Protection Gateway vulnerabilities

Get an alert for each new Kiteworks Email Protection Gateway CVE, with AI-written analysis and remediation steps.

Create an account See pricing

On this page

Overview
Severity and exploitation
Affected versions and CVEs
Common weakness types
Other products
FAQ
References