CVE-2026-54154

Kiteworks Email Protection Gateway Flaw Rated CVSS 10 Lets Unauthenticated Attackers Run Code as Root, Alongside a Wave of Account-Takeover Bugs (CVE-2026-54154)

Kiteworks fixed a CVSS 10 root code-execution flaw in Email Protection Gateway (CVE-2026-54154) and three 9.8 account takeovers. Upgrade EPG and Core to 9.5.1.