Is CVE-2026-102142 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-102142?

CVE-2026-102142 has a CVSS v3 severity of HIGH (7.2).

Back

CVE-2026-102142

Description

A system notification template on the Kiteworks appliance was rendered by a template engine that evaluated expressions contained in the stored template body. An authenticated System Administrator could potentially store a crafted template that executed operating-system commands on the appliance when the notification was next sent.