Lucene search
+L

4 matches found

Cvelist
Cvelist
•added 2026/09/30 8:09 p.m.•49 views

CVE-2026-102149 Kiteworks Email Protection Gateway Improper Access Control

Kiteworks Email Protection Gateway did not sufficiently restrict which account a certificate could be assigned to. This could allow an attacker to associate a certificate with another user's account, affecting the confidentiality and integrity of that account's encrypted mail and, where...

9.4CVSS0.00239EPSS
SaveExploits0References2
CVE
CVE
•added 2026/09/30 8:09 p.m.•35 views

CVE-2026-102149

The Kiteworks Email Protection Gateway is vulnerable to an improper access control issue because it fails to sufficiently restrict which account a certificate can be assigned to. An attacker could exploit this to associate a certificate with another user's account, compromising the confidentialit...

9.4CVSS5.8AI score0.00239EPSS
SaveExploits0References2Affected Software1
EUVD
EUVD
•added 2026/09/30 8:09 p.m.•16 views

EUVD-2026-90385

Kiteworks Email Protection Gateway did not sufficiently restrict which account a certificate could be assigned to. This could allow an attacker to associate a certificate with another user's account, affecting the confidentiality and integrity of that account's encrypted mail and, where...

9.4CVSS5.8AI score0.00239EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/30 12:00 a.m.•12 views

CVE-2026-102149: Missing Authentication for Critical Function

Kiteworks Email Protection Gateway did not sufficiently restrict which account a certificate could be assigned to. This could allow an attacker to associate a certificate with another user's account, affecting the confidentiality and integrity of that account's encrypted mail and, where...

9.4CVSS5.8AI score0.00239EPSS
SaveExploits0References3
Rows per page
Query Builder