KI
Product
Kiteworks
83
CVEs
0
On KEV
9.8
Max CVSS
61
New 30D
Severity mix
Critical 9High 43Medium 30Low 1
Watch
Add Kiteworks to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-102141 | 6.7 | Sep 30 | Kiteworks Core Privilege Escalation through External Control of File Name or Path Affected: before 9.5.1 |
| CVE-2021-31585 | 6.7 | Jun 23 | Accellion Kiteworks before 7.3.1 allows a user with Admin privileges to escalate their privileges by generating SSH passwords that allow local access Affected: before 7.3.1 |
| CVE-2026-102133 | 6.6 | Sep 30 | Kiteworks Core Arbitrary File Write through Command Injection Affected: before 9.5.1 |
| CVE-2026-102135 | 6.6 | Sep 30 | Kiteworks Email Protection Gateway Deserialization of Untrusted Data Affected: before 9.5.1 |
| CVE-2026-102145 | 6.6 | Sep 30 | Kiteworks Core Server-Side Request Forgery through CRLF Injection Affected: before 9.5.1 |
| CVE-2026-102124 | 6.5 | Sep 30 | Kiteworks Core Missing Authentication for Critical Function Affected: before 9.5.0 |
| CVE-2026-102139 | 6.5 | Sep 30 | Kiteworks Email Protection Gateway Incorrect Authorization Affected: before 9.5.1 |
| CVE-2026-102146 | 6.5 | Sep 30 | Kiteworks Email Protection Gateway Arbitrary File Write through Server-Side Template Injection Affected: before 9.5.1 |
| CVE-2026-24753 | 6.5 | Jun 1 | Kiteworks Secure Data Forms is vulnerable to Authorization Bypass Through User-Controlled Key Affected: before 9.3.0 |
| CVE-2026-23638 | 6.5 | Jun 1 | Kiteworks Secure Data Forms is vulnerable to Authorization Bypass Through User-Controlled Key Affected: before 9.3.0 |
| CVE-2026-23635 | 6.5 | Mar 25 | Kiteworks Secure Data Forms has a potential Unprotected Transport of Credentials Affected: before 9.2.1 |
| CVE-2026-23514 | 6.5 | Mar 25 | Kiteworks Core before 9.2.2 is vulnerable to Improper Ownership Management Affected: 9.2.0; 9.2.1 |
| CVE-2026-28271 | 6.5 | Feb 27 | Kiteworks Core is vulnerable to Server-Side Request Forgery (SSRF) Affected: before 9.2.0 |
| CVE-2017-9421 | 6.5 | May 24 | Authentication Bypass vulnerability in Accellion kiteworks before 2017.01.00 allows remote attackers to execute certain API calls on behalf of a web user using a gathered token… Affected: before 2017.01.00 |
| CVE-2026-102136 | 6.3 | Sep 30 | Kiteworks Core Command Execution through Configuration Injection Affected: before 9.5.1 |
| CVE-2026-102110 | 5.9 | Sep 30 | Missing authentication on a Kiteworks appliance setup function Affected: before 9.5.1 |
| CVE-2026-102134 | 5.4 | Sep 30 | Kiteworks Core Unprotected Alternate Channel Affected: before 9.5.1 |
| CVE-2026-24755 | 5.4 | Jun 1 | Kiteworks Secure Data Forms is vulnerable to Authorization Bypass Through User-Controlled Key Affected: before 9.3.0 |
| CVE-2026-24754 | 5.4 | Jun 1 | Kiteworks Secure Data Forms Vulnerable to Cross-site Scripting Affected: before 9.3.0 |
| CVE-2026-24750 | 5.4 | Mar 25 | Kiteworks Secure Data Forms vulnerable to Cross-site Scripting Affected: before 9.2.1 |
| CVE-2026-102144 | 5.3 | Sep 30 | Kiteworks Email Protection Gateway Uncontrolled Resource Consumption Affected: before 9.5.1 |
| CVE-2026-102111 | 4.9 | Sep 30 | Kiteworks Core Improper Validation of Specified Quantity in Input Affected: before 9.5.0 |
| CVE-2026-102140 | 4.9 | Sep 30 | Kiteworks Core Insufficient Verification of Data Authenticity Affected: before 9.5.1 |
| CVE-2026-28272 | 4.8 | Feb 27 | Kiteworks Email Protection Gateway has a Cross-site Scripting vulnerability Affected: before 9.2.0 |
| CVE-2026-102107 | 4.6 | Sep 30 | Kiteworks Core user impersonation in a file-request feature Affected: before 9.5.1 |
| CVE-2026-102122 | 4.3 | Sep 30 | Kiteworks Core Incorrect Authorization Affected: before 9.5.1 |
| CVE-2026-102090 | 4.3 | Sep 30 | Kiteworks Core content injection Affected: before 9.5.1 |
| CVE-2026-24761 | 4.3 | Jun 1 | Kiteworks Secure Data Forms is vulnerable to Authorization Bypass Through User-Controlled Key Affected: before 9.3.0 |
| CVE-2026-24756 | 4.3 | Jun 1 | Kiteworks Secure Data Forms is vulnerable to Authorization Bypass Through User-Controlled Key Affected: before 9.3.0 |
| CVE-2026-102137 | 4.1 | Sep 30 | Kiteworks Core Unrestricted Upload of File with Dangerous Type Affected: before 9.5.1 |
Showing 30