CO
Product
core
36
CVEs
0
On KEV
9.8
Max CVSS
35
New 30D
Severity mix
Critical 2High 19Medium 14Low 1
Watch
Add core to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-102141 | 6.7 | Sep 30 | Kiteworks Core Privilege Escalation through External Control of File Name or Path Affected: before 9.5.1 |
| CVE-2026-102133 | 6.6 | Sep 30 | Kiteworks Core Arbitrary File Write through Command Injection Affected: before 9.5.1 |
| CVE-2026-102145 | 6.6 | Sep 30 | Kiteworks Core Server-Side Request Forgery through CRLF Injection Affected: before 9.5.1 |
| CVE-2026-102124 | 6.5 | Sep 30 | Kiteworks Core Missing Authentication for Critical Function Affected: before 9.5.0 |
| CVE-2026-23514 | 6.5 | Mar 25 | Kiteworks Core before 9.2.2 is vulnerable to Improper Ownership Management Affected: >= 9.2.0, < 9.2.2 |
| CVE-2026-102136 | 6.3 | Sep 30 | Kiteworks Core Command Execution through Configuration Injection Affected: before 9.5.1 |
| CVE-2026-102110 | 5.9 | Sep 30 | Missing authentication on a Kiteworks appliance setup function Affected: before 9.5.1 |
| CVE-2026-102134 | 5.4 | Sep 30 | Kiteworks Core Unprotected Alternate Channel Affected: before 9.5.1 |
| CVE-2026-102111 | 4.9 | Sep 30 | Kiteworks Core Improper Validation of Specified Quantity in Input Affected: before 9.5.0 |
| CVE-2026-102140 | 4.9 | Sep 30 | Kiteworks Core Insufficient Verification of Data Authenticity Affected: before 9.5.1 |
| CVE-2026-102107 | 4.6 | Sep 30 | Kiteworks Core user impersonation in a file-request feature Affected: before 9.5.1 |
| CVE-2026-102122 | 4.3 | Sep 30 | Kiteworks Core Incorrect Authorization Affected: before 9.5.1 |
| CVE-2026-102090 | 4.3 | Sep 30 | Kiteworks Core content injection Affected: before 9.5.1 |
| CVE-2026-102137 | 4.1 | Sep 30 | Kiteworks Core Unrestricted Upload of File with Dangerous Type Affected: before 9.5.1 |
Showing 14