CVE-2026-102106

Name of the Vulnerable Software and Affected Versions Kiteworks Email Protection Gateway (affected versions not specified)

Description An administrative service in Kiteworks Email Protection Gateway fails to consistently enforce administrator authentication, allowing the password check to be bypassed. An attacker who references a valid administrator account can create, modify, or delete internal users and managed domains, as well as alter security-feature configurations without authenticating. Deleting a managed domain also removes associated user accounts, which could result in administrators being locked out of the gateway.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.