CVE-2026-102139

An authorization check in the large file exchange feature of Kiteworks Email Protection Gateway did not correctly establish that the requesting user was a party to the package being requested. An authenticated user of that optional feature could read the subject, message body, and attachments of...

CVE-2026-102139 Kiteworks Email Protection Gateway Incorrect Authorization

An authorization check in the large file exchange feature of Kiteworks Email Protection Gateway did not correctly establish that the requesting user was a party to the package being requested. An authenticated user of that optional feature could read the subject, message body, and attachments of...

CVE-2026-102139

The Kiteworks Email Protection Gateway contains an incorrect authorization flaw within its optional large file exchange feature. The root cause is a failure to properly verify that a requesting user is a party to the package they are attempting to access. This allows an authenticated user to read...

EUVD-2026-90275

An authorization check in the large file exchange feature of Kiteworks Email Protection Gateway did not correctly establish that the requesting user was a party to the package being requested. An authenticated user of that optional feature could read the subject, message body, and attachments of...

CVE-2026-102139 Kiteworks Email Protection Gateway Incorrect Authorization

An authorization check in the large file exchange feature of Kiteworks Email Protection Gateway did not correctly establish that the requesting user was a party to the package being requested. An authenticated user of that optional feature could read the subject, message body, and attachments of...

CVE-2026-102139: Authorization Bypass Through User-Controlled Key

An authorization check in the large file exchange feature of Kiteworks Email Protection Gateway did not correctly establish that the requesting user was a party to the package being requested. An authenticated user of that optional feature could read the subject, message body, and attachments of...

PT-2026-103572

Name of the Vulnerable Software and Affected Versions Kiteworks Email Protection Gateway affected versions not specified Description An authorization check in the large file exchange feature does not correctly verify if the requesting user is a party to the requested package. This allows an...