CVEvulnerability

CVE-2026-102146

6.5 MEDIUM Published 2026-09-30 Modified 2026-10-13 Official page ↗
Status
Analyzed
Published
2026-09-30
Last modified
2026-10-13
Assigner
9119a7d8-5eab-497f-8521-727c672e3725
CVSS 3.1 (9119a7d8-5eab-497f-8521-727c672e3725)
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
Weaknesses
CWE-73

Description

An authenticated Email Protection Gateway administrator holding only limited, delegated permissions could write files with attacker-controlled content to arbitrary locations accessible to the Email Protection Gateway service account. This exceeds the administrator's intended privileges and could be used to alter application files and configuration or to disrupt the availability of the service.

Affected configurations

• accellion kiteworks (< 9.5.1)

Related

Weakness · CWE (1)

  • CWE-73 External Control of File Name or Path weakness

References