CVE-2026-102139
MEDIUM
NVD
CVSS Score
6.5
Severity
MEDIUM
Published
Sep 30, 2026
Vendor
unknown
Description
An authorization check in the large file exchange feature of Kiteworks Email Protection Gateway did not correctly establish that the requesting user was a party to the package being requested. An authenticated user of that optional feature could read the subject, message body, and attachments of packages they neither sent nor received.