CVE-2026-102103— Kiteworks Email Protection Gateway server-side request forgery
Quick assessment
Affected
Kiteworks Email Protection Gateway
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Kiteworks Email Protection Gateway 在 9.5.0 版本之前存在服务器端请求伪造（SSRF）漏洞。该 SSRF 弱点可能允许远程未认证的攻击者诱导网关向内部或其他非预期的网络目标发起精心构造的请求。这些请求在网关处理入站消息并获取证书吊销列表（CRL）时触发。根据从网关可访问的服务情况，此漏洞可能导致敏感内部信息泄露或干扰网关的正常运行。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-102103
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Kiteworks Email Protection Gateway server-side request forgery
Source: CVE Program / CVE List V5
Vulnerability Description
Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Server-Side Request Forgery (SSRF). A server-side request forgery (SSRF) weakness in Kiteworks Email Protection Gateway could allow a remote, unauthenticated attacker to induce the gateway to issue crafted requests to internal or otherwise unintended network destinations. The requests are triggered while the gateway retrieves a certificate revocation list in an inbound message. Depending on the services reachable from the gateway, this could disclose sensitive internal information or disrupt gateway operation.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
服务端请求伪造(SSRF)
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Kiteworks | Email Protection Gateway | 0 ~ 9.5.0 | - |
|
II. Public POCs for CVE-2026-102103
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-102103
请登录查看更多情报信息。
Other References for CVE-2026-102103 (2)
Same Patch Batch · Kiteworks · 2026-09-30 · 61 CVEs total
| CVE-2026-102115 | 9.8 CRITICAL | Kiteworks Core Authentication Bypass in the Password Reset Workflow |
| CVE-2026-102149 | 9.4 CRITICAL | Kiteworks Email Protection Gateway Improper Access Control |
| CVE-2026-102147 | 9.3 CRITICAL | Kiteworks Core Administrative Account Takeover through Stored Cross-site Scripting (XSS) |
| CVE-2026-102104 | 9.1 CRITICAL | Kiteworks Email Protection Gateway server-side request forgery |
| CVE-2026-102106 | 9.1 CRITICAL | Kiteworks Email Protection Gateway improper authentication |
| CVE-2026-102105 | 9.1 CRITICAL | Kiteworks Email Protection Gateway server-side request forgery |
| CVE-2026-102102 | 9.1 CRITICAL | Kiteworks Email Protection Gateway server-side request forgery |
| CVE-2026-102095 | 9.1 CRITICAL | Kiteworks Email Protection Gateway server-side request forgery |
| CVE-2026-102120 | 8.8 HIGH | Kiteworks Core OS Command Injection |
| CVE-2026-102125 | 8.8 HIGH | Kiteworks Core Sandbox Escape |
| CVE-2026-102100 | 8.7 HIGH | Kiteworks Core stored XSS |
| CVE-2026-102092 | 8.7 HIGH | Kiteworks Core stored XSS |
| CVE-2026-102121 | 8.6 HIGH | Kiteworks Secure Data Forms Exposure of Sensitive Information to an Unauthorized Actor |
| CVE-2026-102126 | 8.1 HIGH | Kiteworks Core Stored Cross-site Scripting (XSS) |
| CVE-2026-102101 | 8.1 HIGH | Kiteworks Core deserialization of untrusted data |
| CVE-2026-102113 | 7.8 HIGH | Kiteworks Core Local Privilege Escalation |
| CVE-2026-102118 | 7.8 HIGH | Kiteworks Core before version 9.5.0 is vulnerable to Local Privilege Escalation |
| CVE-2026-102112 | 7.8 HIGH | Kiteworks Core Local Privilege Escalation |
| CVE-2026-102143 | 7.5 HIGH | Kiteworks Email Protection Gateway Unrestricted Upload of File with Dangerous Type |
| CVE-2026-102128 | 7.5 HIGH | Kiteworks Email Protection Gateway Improper Authentication |
Showing top 20 of 61 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: Email Protection Gateway
-
CVE-2026-102105
Kiteworks Email Protection Gateway server-side request forge -
CVE-2026-102106
Kiteworks Email Protection Gateway improper authentication -
CVE-2026-102108
Kiteworks Email Protection Gateway deserialization of untrus -
CVE-2026-102116
Kiteworks Email Protection Gateway Path Traversal -
CVE-2026-102119
Kiteworks Email Protection Gateway Path Traversal
Same vendor: Kiteworks
-
CVE-2026-102105
Kiteworks Email Protection Gateway server-side request forge -
CVE-2026-102106
Kiteworks Email Protection Gateway improper authentication -
CVE-2026-102107
Kiteworks Core user impersonation in a file-request feature -
CVE-2026-102108
Kiteworks Email Protection Gateway deserialization of untrus -
CVE-2026-102109
Kiteworks Secure Data Forms SQL injection
Same weakness: CWE-918
-
CVE-2026-102105
Kiteworks Email Protection Gateway server-side request forge -
CVE-2023-54402
iDocView SSRF via /doc/upload Endpoint Hardcoded Token -
CVE-2026-102104
Kiteworks Email Protection Gateway server-side request forge -
CVE-2026-102102
Kiteworks Email Protection Gateway server-side request forge -
CVE-2026-102138
Kiteworks Core Server-Side Request Forgery (SSRF)
V. Comments for CVE-2026-102103
No comments yet