CVE-2026-102137

MediumCVSS 4.1/10Last modified Oct 13, 2026

Description

An authenticated administrator could bypass the content validation applied to an administrative file upload and store a file containing dangerous content on the appliance. This did not by itself result in code execution, which would require a separate vulnerability to run the stored file.

Metrics

CVSS 3.1 4.1/10CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L

Weakness enumeration

CWE-434

Affected software

No affected versions have been published.

Timeline

Published
Sep 30, 2026
Last modified
Oct 13, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-1021383.3An authenticated administrator on a node with an optional, separately licensed gateway role enabled could supply a connector URL that the seCVE-2026-1021396.5An authorization check in the large file exchange feature of Kiteworks Email Protection Gateway did not correctly establish that the requestCVE-2026-102147.3A weakness has been identified in zhayujie chatgpt-on-wechat up to 2.0.8. This issue affects the function _get_safety_warning of the file agCVE-2026-1021404.9An authenticated administrator could initiate an administrative import using a file whose contents were not fully verified, because the impoCVE-2026-1021416.7Two Kiteworks Core cluster-management operations did not validate file paths supplied to them, so an attacker holding root on one node of a CVE-2026-1021427.2A system notification template on the Kiteworks appliance was rendered by a template engine that evaluated expressions contained in the storCVE-2026-1021437.5An unauthenticated attacker could cause a file with attacker-controlled content to be written to the appliance filesystem through an adminisCVE-2026-1021445.3A resource exhaustion vulnerability in Kiteworks Email Protection Gateway allowed an unauthenticated remote attacker to repeatedly trigger aCVE-2026-1021456.6An authenticated administrator could cause the server to issue requests to, and interact with, internal network services that are not meant CVE-2026-1021466.5An authenticated Email Protection Gateway administrator holding only limited, delegated permissions could write files with attacker-controllCVE-2026-1021479.3A stored cross-site scripting (XSS) weakness in Kiteworks Core could allow an unauthenticated attacker to store crafted content that later eCVE-2026-1021499.4Kiteworks Email Protection Gateway did not sufficiently restrict which account a certificate could be assigned to. This could allow an attac