KI
Product
Kiteworks
83
CVEs
0
On KEV
9.8
Max CVSS
61
New 30D
Severity mix
Critical 9High 43Medium 30Low 1
Watch
Add Kiteworks to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-102115 | 9.8 | Sep 30 | Kiteworks Core Authentication Bypass in the Password Reset Workflow Affected: before 9.5.0 |
| CVE-2026-102149 | 9.4 | Sep 30 | Kiteworks Email Protection Gateway Improper Access Control Affected: before 9.5.1 |
| CVE-2026-102147 | 9.3 | Sep 30 | Kiteworks Core Administrative Account Takeover through Stored Cross-site Scripting (XSS) Affected: before 9.5.1 |
| CVE-2026-102105 | 9.1 | Sep 30 | Kiteworks Email Protection Gateway server-side request forgery Affected: before 9.5.0 |
| CVE-2026-102106 | 9.1 | Sep 30 | Kiteworks Email Protection Gateway improper authentication Affected: before 9.5.0 |
| CVE-2026-102104 | 9.1 | Sep 30 | Kiteworks Email Protection Gateway server-side request forgery Affected: before 9.5.0 |
| CVE-2026-102103 | 9.1 | Sep 30 | Kiteworks Email Protection Gateway server-side request forgery Affected: before 9.5.0 |
| CVE-2026-102102 | 9.1 | Sep 30 | Kiteworks Email Protection Gateway server-side request forgery Affected: before 9.5.0 |
| CVE-2026-102095 | 9.1 | Sep 30 | Kiteworks Email Protection Gateway server-side request forgery Affected: before 9.5.0 |
| CVE-2026-102120 | 8.8 | Sep 30 | Kiteworks Core OS Command Injection Affected: before 9.5.1 |
| CVE-2026-102125 | 8.8 | Sep 30 | Kiteworks Core Sandbox Escape Affected: before 9.5.0 |
| CVE-2026-24782 | 8.8 | Jun 1 | Kiteworks Secure Data Forms has a SQL Injection vulnerability Affected: before 9.3.0 |
| CVE-2026-28269 | 8.8 | Feb 26 | Kiteworks Core has an OS Command Injection Affected: before 9.2.0 |
| CVE-2025-53939 | 8.8 | Nov 29 | Kiteworks is a private data network (PDN) Affected: before 9.1.0 |
| CVE-2021-31586 | 8.8 | Jun 23 | Accellion Kiteworks before 7.4.0 allows an authenticated user to perform SQL Injection via LDAPGroup Search Affected: before 7.4.0 |
| CVE-2026-102100 | 8.7 | Sep 30 | Kiteworks Core stored XSS Affected: before 9.5.0 |
| CVE-2026-102092 | 8.7 | Sep 30 | Kiteworks Core stored XSS Affected: before 9.5.0 |
| CVE-2026-102121 | 8.6 | Sep 30 | Kiteworks Secure Data Forms Exposure of Sensitive Information to an Unauthorized Actor Affected: before 9.5.1 |
| CVE-2026-24752 | 8.2 | Jun 1 | Kiteworks Secure Data Forms Vulnerable to Cross-site Scripting Affected: before 9.3.0 |
| CVE-2026-24751 | 8.2 | Jun 1 | Kiteworks Secure Data Forms Vulnerable to Cross-site Scripting Affected: before 9.3.0 |
| CVE-2026-102126 | 8.1 | Sep 30 | Kiteworks Core Stored Cross-site Scripting (XSS) Affected: before 9.5.1 |
| CVE-2026-102101 | 8.1 | Sep 30 | Kiteworks Core deserialization of untrusted data Affected: before 9.5.0 |
| CVE-2026-102112 | 7.8 | Sep 30 | Kiteworks Core Local Privilege Escalation Affected: before 9.5.0 |
| CVE-2026-102113 | 7.8 | Sep 30 | Kiteworks Core Local Privilege Escalation Affected: before 9.5.0 |
| CVE-2026-102118 | 7.8 | Sep 30 | Kiteworks Core before version 9.5.0 is vulnerable to Local Privilege Escalation Affected: before 9.5.0 |
| CVE-2026-102128 | 7.5 | Sep 30 | Kiteworks Email Protection Gateway Improper Authentication Affected: before 9.5.1 |
| CVE-2026-102143 | 7.5 | Sep 30 | Kiteworks Email Protection Gateway Unrestricted Upload of File with Dangerous Type Affected: before 9.5.1 |
| CVE-2026-102091 | 7.5 | Sep 30 | Kiteworks Secure Data Forms server-side request forgery Affected: before 9.5.0 |
| CVE-2026-29092 | 7.5 | Mar 25 | Kiteworks Email Protection Gateway has an Insufficient Session Expiration Affected: before 9.2.1 |
| CVE-2026-102123 | 7.4 | Sep 30 | Kiteworks Core Path Traversal Affected: before 9.5.0 |
| CVE-2026-102108 | 7.2 | Sep 30 | Kiteworks Email Protection Gateway deserialization of untrusted data Affected: before 9.5.0 |
| CVE-2026-102114 | 7.2 | Sep 30 | Kiteworks Core OS Command Injection Affected: before 9.5.0 |
| CVE-2026-102116 | 7.2 | Sep 30 | Kiteworks Email Protection Gateway Path Traversal Affected: before 9.5.0 |
| CVE-2026-102117 | 7.2 | Sep 30 | Kiteworks Core Remote Code Execution Affected: before 9.5.1 |
| CVE-2026-102119 | 7.2 | Sep 30 | Kiteworks Email Protection Gateway Path Traversal Affected: before 9.5.0 |
| CVE-2026-102129 | 7.2 | Sep 30 | Kiteworks Core Incorrect Privilege Assignment Affected: before 9.5.1 |
| CVE-2026-102130 | 7.2 | Sep 30 | Kiteworks Email Protection Gateway Remote Code Execution Affected: before 9.5.1 |
| CVE-2026-102131 | 7.2 | Sep 30 | Kiteworks Email Protection Gateway Improper Handling of Case Sensitivity Affected: before 9.5.0 |
| CVE-2026-102132 | 7.2 | Sep 30 | Kiteworks Core Privilege Escalation through Improper Access Control Affected: before 9.5.1 |
| CVE-2026-102142 | 7.2 | Sep 30 | Kiteworks Core Remote Code Execution through Server-Side Template Injection Affected: before 9.5.1 |
| CVE-2026-102150 | 7.2 | Sep 30 | Kiteworks Secure Data Forms Missing Authentication for Critical Function Affected: 9.3.0 before 9.5.1 |
| CVE-2026-102097 | 7.2 | Sep 30 | Kiteworks Email Protection Gateway remote code execution Affected: before 9.5.0 |
| CVE-2026-102096 | 7.2 | Sep 30 | Kiteworks Core OS command injection Affected: before 9.5.0 |
| CVE-2026-102099 | 7.2 | Sep 30 | Kiteworks Core arbitrary file write Affected: before 9.5.0 |
| CVE-2026-102094 | 7.2 | Sep 30 | Kiteworks Email Protection Gateway unsafe reflection Affected: before 9.5.0 |
| CVE-2026-102093 | 7.2 | Sep 30 | Kiteworks Core improper privilege management Affected: before 9.5.0 |
| CVE-2026-102098 | 7.2 | Sep 30 | Kiteworks Core SQL Injection Affected: before 9.5.0 |
| CVE-2026-102089 | 7.2 | Sep 30 | Kiteworks Email Protection Gateway path traversal Affected: before 9.5.0 |
| CVE-2026-23636 | 7.2 | Mar 25 | Kiteworks Secure Data Forms is vulnerable to an Unrestricted Upload of File with Dangerous Type Affected: before 9.2.1 |
| CVE-2026-28270 | 7.2 | Feb 27 | Kiteworks Core has an Unrestricted Upload of File with Dangerous Type Affected: before 9.2.0 |