Kiteworks vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

KI

Product

Kiteworks

by Accellion · last CVE Sep 30, 2026

83

CVEs

0

On KEV

9.8

Max CVSS

61

New 30D

Vulnerabilities83 In the news0 Timeline

Severity mix

Critical 9High 43Medium 30Low 1

Severity

All severities83 Critical9 High43 Medium30 Low1

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Kiteworks to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-102115	9.8	1%	Sep 30	Kiteworks Core Authentication Bypass in the Password Reset Workflow Affected: before 9.5.0
CVE-2026-102149	9.4	0%	Sep 30	Kiteworks Email Protection Gateway Improper Access Control Affected: before 9.5.1
CVE-2026-102147	9.3	0%	Sep 30	Kiteworks Core Administrative Account Takeover through Stored Cross-site Scripting (XSS) Affected: before 9.5.1
CVE-2026-102105	9.1	1%	Sep 30	Kiteworks Email Protection Gateway server-side request forgery Affected: before 9.5.0
CVE-2026-102106	9.1	1%	Sep 30	Kiteworks Email Protection Gateway improper authentication Affected: before 9.5.0
CVE-2026-102104	9.1	1%	Sep 30	Kiteworks Email Protection Gateway server-side request forgery Affected: before 9.5.0
CVE-2026-102103	9.1	1%	Sep 30	Kiteworks Email Protection Gateway server-side request forgery Affected: before 9.5.0
CVE-2026-102102	9.1	1%	Sep 30	Kiteworks Email Protection Gateway server-side request forgery Affected: before 9.5.0
CVE-2026-102095	9.1	0%	Sep 30	Kiteworks Email Protection Gateway server-side request forgery Affected: before 9.5.0