{"vulnerability": "cve-2026-10210", "sightings": [{"uuid": "7876c29a-105d-47d4-97aa-0b17ab258d62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-10210", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mn76kylaag2b", "content": "CVE-2026-10210 - AstrBotDevs AstrBot skill_manager.py _sanitize_prompt_description injection\nCVE ID : CVE-2026-10210\n \n Published : June 1, 2026, 1 a.m. | 1\u00a0hour, 19\u00a0minutes ago\n \n Description : A vulnerability was found in AstrBotDevs AstrBot 4.23.6. Affected by this vulnerab...", "creation_timestamp": "2026-06-01T03:53:08.744097Z"}, {"uuid": "0a310039-f8f2-44b0-906d-6ab99184b1c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102106", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/ews3ccgmubde6", "content": "CVE-2026-102106 - Kiteworks Email Protection Gateway improper authentication\nCVE ID : CVE-2026-102106\n \n Published : Sept. 30, 2026, 8:24 p.m. | 35\u00a0minutes ago\n \n Description : Improper authentication in a Kiteworks Email Protection Gateway administrative service. An administr...", "creation_timestamp": "2026-09-30T21:46:54.442196Z"}, {"uuid": "1f8e0380-10bb-4da3-88ec-282b51dbcad0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102105", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/6r7lfflbvlrxo", "content": "CVE-2026-102105 - Kiteworks Email Protection Gateway server-side request forgery\nCVE ID : CVE-2026-102105\n \n Published : Sept. 30, 2026, 8:25 p.m. | 35\u00a0minutes ago\n \n Description : Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Server-Side Request For...", "creation_timestamp": "2026-09-30T21:52:54.639400Z"}, {"uuid": "c7a85463-1e0a-44e4-87f7-742640d7446a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102102", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwre7d5j342y", "content": "\ud83d\udea8 CVE-2026-102102 \u2014 CVSS 9.1 CRITICAL\n\nKiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Server-Side Request Forgery (SSRF)...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-102102\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-30T22:08:39.389591Z"}, {"uuid": "14b39b4d-c2ef-49e4-a011-09646cbea881", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102103", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwre7ku23u2f", "content": "\ud83d\udea8 CVE-2026-102103 \u2014 CVSS 9.1 CRITICAL\n\nKiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Server-Side Request Forgery (SSRF)...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-102103\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-30T22:08:47.414915Z"}, {"uuid": "3e5b5d59-7591-446f-85de-60c1f0eeff52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102104", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwre7t3qdx2o", "content": "\ud83d\udea8 CVE-2026-102104 \u2014 CVSS 9.1 CRITICAL\n\nKiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Server-Side Request Forgery (SSRF)...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-102104\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-30T22:08:56.070692Z"}, {"uuid": "543f6e7d-4b98-49c8-9252-cfc8d23152c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102105", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwrea36xrt2u", "content": "\ud83d\udea8 CVE-2026-102105 \u2014 CVSS 9.1 CRITICAL\n\nKiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Server-Side Request Forgery (SSRF)...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-102105\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-30T22:09:04.618773Z"}, {"uuid": "c94fd69d-3540-42ef-81cc-e3ccbd67f12b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102106", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mwreadppps2n", "content": "\ud83d\udea8 CVE-2026-102106 \u2014 CVSS 9.1 CRITICAL\n\nImproper authentication in a Kiteworks Email Protection Gateway administrative service. An administrative s...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-102106\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-30T22:09:13.580435Z"}, {"uuid": "385bee3b-1f66-4f07-b75b-1a30891ccdf7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-102105", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117363770896067135", "content": "CVE-2026-102105: Kiteworks Email Protection Gateway <9.5.0 has a CRITICAL SSRF (CVSS 9.1) letting remote attackers access internal resources. No confirmed patch \u2014 review vendor guidance & restrict network access. https://radar.offseq.com/threat/cve-2026-102105-cwe-918-server-side-request-forgery-ssrf-in-kiteworks-email-protection-gateway-24b84c616744b5a3 #OffSeq #SSRF #Infosec #Vuln", "creation_timestamp": "2026-10-01T04:30:24.404261Z"}, {"uuid": "c5bdb9de-ac9a-4332-ae16-7f642c8f6080", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-102105", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwrzjyeowa2q", "content": "CRITICAL SSRF (CVSS 9.1) in Kiteworks Email Protection Gateway <9.5.0 enables unauthorized internal network access. No patch confirmed \u2014 restrict gateway access & check advisories. https://radar.offseq.com/threat/cve-2026-102105-cwe-918-server-side-request-forgery-ssrf-in-kiteworks-email-protecti...", "creation_timestamp": "2026-10-01T04:30:26.265936Z"}, {"uuid": "9ac851ee-465f-4286-87d7-ad64ee86c535", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-102105", "type": "seen", "source": "https://bsky.app/profile/hermes71.bsky.social/post/3mws3cwfn4h2z", "content": "Daily IT Security Digest \u2014 2026-10-01\nhttps://stemshop.top/cve/CVE-2026-14157\n\n## 4. Kiteworks Email Protection Gateway SSRF \u2014 CVSS 9.1\nCVE-2026-102105 is a critical server-side request forgery vulnerability in Kiteworks Email Protection Gateway versions below 9.5.0, enabling remote attackers to", "creation_timestamp": "2026-10-01T05:02:16.454193Z"}, {"uuid": "bba3978a-9465-41ae-a3c2-d7f386d36d9d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-102106", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117364478756381420", "content": "CVE-2026-102106 (CRITICAL, CVSS 9.1): Kiteworks Email Protection Gateway (<9.5.0) suffers improper admin authentication \u2014 attackers can bypass password checks & gain full admin access. Restrict admin service access & monitor for patches. https://radar.offseq.com/threat/cve-2026-102106-cwe-287-improper-authentication-in-kiteworks-email-protection-gateway-f705d7916e63696f #OffSeq #CVE #Infosec", "creation_timestamp": "2026-10-01T07:30:25.625798Z"}, {"uuid": "f35e4bda-1b1e-4a3d-9bcf-875d82dffa5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-102106", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwsdlv5ekz2j", "content": "Kiteworks Email Protection Gateway (v<9.5.0) is impacted by a CRITICAL improper authentication flaw (CVE-2026-102106). Admins: restrict admin service access & watch for vendor updates. Full details: https://radar.offseq.com/threat/cve-2026-102106-cwe-287-improper-authentication-in-kiteworks-email...", "creation_timestamp": "2026-10-01T07:30:28.475011Z"}]}