ChangeIntel IT change radar

Public mode

No access to your tenant or devices. Every item links to its source. What this means

CVE-2026-102146

Kiteworks Email Protection Gateway Arbitrary File Write through Server-Side Template Injection

CVSS 3.1 6.5 MEDIUMCheck source for fixed versionsKEV status unknown

Original advisory

Historical advisory recorded 23 Oct 2026 15:48:27 UTC. Read the latest advisory.

cve-program · CVE-2026-102146

Published

An authenticated Email Protection Gateway administrator holding only limited, delegated permissions could write files with attacker-controlled content to arbitrary locations accessible to the Email Protection Gateway service account. This exceeds the administrator's intended privileges and could be used to alter application files and configuration or to disrupt the availability of the service.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2026-102146

Published

Email Protection Gateway

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Kiteworks",
                    "product": "Email Protection Gateway",
                    "defaultStatus": "unknown",
                    "versions": [
                        {
                            "version": "0",
                            "status": "affected",
                            "lessThan": "9.5.1",
                            "versionType": "custom"
                        },
                        {
                            "version": "9.5.1",
                            "status": "unaffected"
                        }
                    ]
                }

Original source record · Cite this exact observation · Complete original publisher JSON