Is CVE-2026-102128 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-102128?

CVE-2026-102128 has a CVSS v3 severity of HIGH (7.5).

Back

CVE-2026-102128

Description

An identity-verification weakness in Kiteworks Email Protection Gateway allowed the gateway to act on the Kiteworks platform on behalf of a user it had not authenticated, and to provision a platform account for an identity it did not already know. A remote, unauthenticated sender could potentially exploit this to obtain control of a platform account.