medium6.5
CVE-2026-102139
An authorization check in the large file exchange feature of Kiteworks Email Protection Gateway did not correctly establish that the requesting user was a part…
Impact
An authorization check in the large file exchange feature of Kiteworks Email Protection Gateway did not correctly establish that the requesting user was a party to the package being requested. An authenticated user of that optional feature could read the subject, message body, and attachments of packages they neither sent nor received.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Accellion | Kiteworks | before 9.5.1 |