VulnerabilityAnalyzed

CVE-2026-102145

On its own this did not result in code execution.

MEDIUM 6.6EPSS 0.28%

Does this matter?

Lower severity and a low EPSS score (0.28%). Track it; it rarely justifies an emergency change on its own.

Description

An authenticated administrator could cause the server to issue requests to, and interact with, internal network services that are not meant to be reachable through this interface. On its own this did not result in code execution.

CVSS 3.1: 6.6 MEDIUMCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L
EPSS: 0.28% probability · 20th percentile
Public exploits: None in Exploit-DB
CISA KEV: Not listed
Weakness: CWE-93
Affected: accellion/kiteworks
Source: 9119a7d8-5eab-497f-8521-727c672e3725

EPSS trend

EPSS moved from 0.4% on 1 October 2026 to 0.3% on 26 October 2026.

References

https://github.com/kiteworks/security-advisories/security/advisories/GHSA-h97r-j99c-q8xcVendor Advisory
https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/VA/white/2026/va-26-274-01.jsonBroken Link

Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.