AC
Vendor
Accellion
126
CVEs
4
On KEV
61
New 30D
Products
KI9.8
Kiteworks
Accellion
83 CVEs0 on KEV61 new
FT9.8
FTA
File Transfer
6 CVEs4 on KEV0 new
FT10.0
File Transfer Appliance
Accellion
20 CVEs0 on KEV0 new
SF–
Secure File Transfer Appliance
Accellion
7 CVEs0 on KEV0 new
KM8.8
Kiteworks Managed File Transfer
Accellion
4 CVEs0 on KEV0 new
KA7.8
Kiteworks Appliance
Accellion
3 CVEs0 on KEV0 new
FS6.1
Ftp Server
Accellion
2 CVEs0 on KEV0 new
MF6.5
Managed File Transfer
Accellion
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-102105 | KI Kiteworks Accellion | 9.1 | Sep 30 | Kiteworks Email Protection Gateway server-side request forgery |
| CVE-2026-102106 | KI Kiteworks Accellion | 9.1 | Sep 30 | Kiteworks Email Protection Gateway improper authentication |
| CVE-2026-102107 | KI Kiteworks Accellion | 4.6 | Sep 30 | Kiteworks Core user impersonation in a file-request feature |
| CVE-2026-102108 | KI Kiteworks Accellion | 7.2 | Sep 30 | Kiteworks Email Protection Gateway deserialization of untrusted data |
| CVE-2026-102109 | KI Kiteworks Accellion | 7.1 | Sep 30 | Kiteworks Secure Data Forms SQL injection |
| CVE-2026-102110 | KI Kiteworks Accellion | 5.9 | Sep 30 | Missing authentication on a Kiteworks appliance setup function |
| CVE-2026-102111 | KI Kiteworks Accellion | 4.9 | Sep 30 | Kiteworks Core Improper Validation of Specified Quantity in Input |
| CVE-2026-102112 | KI Kiteworks Accellion | 7.8 | Sep 30 | Kiteworks Core Local Privilege Escalation |
| CVE-2026-102113 | KI Kiteworks Accellion | 7.8 | Sep 30 | Kiteworks Core Local Privilege Escalation |
| CVE-2026-102114 | KI Kiteworks Accellion | 7.2 | Sep 30 | Kiteworks Core OS Command Injection |
| CVE-2026-102115 | KI Kiteworks Accellion | 9.8 | Sep 30 | Kiteworks Core Authentication Bypass in the Password Reset Workflow |
| CVE-2026-102116 | KI Kiteworks Accellion | 7.2 | Sep 30 | Kiteworks Email Protection Gateway Path Traversal |
| CVE-2026-102117 | KI Kiteworks Accellion | 7.2 | Sep 30 | Kiteworks Core Remote Code Execution |
| CVE-2026-102118 | KI Kiteworks Accellion | 7.8 | Sep 30 | Kiteworks Core before version 9.5.0 is vulnerable to Local Privilege Escalation |
| CVE-2026-102119 | KI Kiteworks Accellion | 7.2 | Sep 30 | Kiteworks Email Protection Gateway Path Traversal |
| CVE-2026-102120 | KI Kiteworks Accellion | 8.8 | Sep 30 | Kiteworks Core OS Command Injection |
| CVE-2026-102121 | KI Kiteworks Accellion | 8.6 | Sep 30 | Kiteworks Secure Data Forms Exposure of Sensitive Information to an Unauthorized Actor |
| CVE-2026-102104 | KI Kiteworks Accellion | 9.1 | Sep 30 | Kiteworks Email Protection Gateway server-side request forgery |
| CVE-2026-102122 | KI Kiteworks Accellion | 4.3 | Sep 30 | Kiteworks Core Incorrect Authorization |
| CVE-2026-102123 | KI Kiteworks Accellion | 7.4 | Sep 30 | Kiteworks Core Path Traversal |
| CVE-2026-102103 | KI Kiteworks Accellion | 9.1 | Sep 30 | Kiteworks Email Protection Gateway server-side request forgery |
| CVE-2026-102124 | KI Kiteworks Accellion | 6.5 | Sep 30 | Kiteworks Core Missing Authentication for Critical Function |
| CVE-2026-102125 | KI Kiteworks Accellion | 8.8 | Sep 30 | Kiteworks Core Sandbox Escape |
| CVE-2026-102126 | KI Kiteworks Accellion | 8.1 | Sep 30 | Kiteworks Core Stored Cross-site Scripting (XSS) |
| CVE-2026-102127 | KI Kiteworks Accellion | 7.0 | Sep 30 | Kiteworks Email Protection Gateway Improper Restriction of XML External Entity Reference |
| CVE-2026-102128 | KI Kiteworks Accellion | 7.5 | Sep 30 | Kiteworks Email Protection Gateway Improper Authentication |
| CVE-2026-102129 | KI Kiteworks Accellion | 7.2 | Sep 30 | Kiteworks Core Incorrect Privilege Assignment |
| CVE-2026-102130 | KI Kiteworks Accellion | 7.2 | Sep 30 | Kiteworks Email Protection Gateway Remote Code Execution |
| CVE-2026-102131 | KI Kiteworks Accellion | 7.2 | Sep 30 | Kiteworks Email Protection Gateway Improper Handling of Case Sensitivity |
| CVE-2026-102132 | KI Kiteworks Accellion | 7.2 | Sep 30 | Kiteworks Core Privilege Escalation through Improper Access Control |
| CVE-2026-102133 | KI Kiteworks Accellion | 6.6 | Sep 30 | Kiteworks Core Arbitrary File Write through Command Injection |
| CVE-2026-102102 | KI Kiteworks Accellion | 9.1 | Sep 30 | Kiteworks Email Protection Gateway server-side request forgery |
| CVE-2026-102134 | KI Kiteworks Accellion | 5.4 | Sep 30 | Kiteworks Core Unprotected Alternate Channel |
| CVE-2026-102135 | KI Kiteworks Accellion | 6.6 | Sep 30 | Kiteworks Email Protection Gateway Deserialization of Untrusted Data |
| CVE-2026-102136 | KI Kiteworks Accellion | 6.3 | Sep 30 | Kiteworks Core Command Execution through Configuration Injection |
| CVE-2026-102137 | KI Kiteworks Accellion | 4.1 | Sep 30 | Kiteworks Core Unrestricted Upload of File with Dangerous Type |
| CVE-2026-102138 | KI Kiteworks Accellion | 3.3 | Sep 30 | Kiteworks Core Server-Side Request Forgery (SSRF) |
| CVE-2026-102101 | KI Kiteworks Accellion | 8.1 | Sep 30 | Kiteworks Core deserialization of untrusted data |
| CVE-2026-102139 | KI Kiteworks Accellion | 6.5 | Sep 30 | Kiteworks Email Protection Gateway Incorrect Authorization |
| CVE-2026-102140 | KI Kiteworks Accellion | 4.9 | Sep 30 | Kiteworks Core Insufficient Verification of Data Authenticity |
| CVE-2026-102141 | KI Kiteworks Accellion | 6.7 | Sep 30 | Kiteworks Core Privilege Escalation through External Control of File Name or Path |
| CVE-2026-102142 | KI Kiteworks Accellion | 7.2 | Sep 30 | Kiteworks Core Remote Code Execution through Server-Side Template Injection |
| CVE-2026-102143 | KI Kiteworks Accellion | 7.5 | Sep 30 | Kiteworks Email Protection Gateway Unrestricted Upload of File with Dangerous Type |
| CVE-2026-102100 | KI Kiteworks Accellion | 8.7 | Sep 30 | Kiteworks Core stored XSS |
| CVE-2026-102144 | KI Kiteworks Accellion | 5.3 | Sep 30 | Kiteworks Email Protection Gateway Uncontrolled Resource Consumption |
| CVE-2026-102150 | KI Kiteworks Accellion | 7.2 | Sep 30 | Kiteworks Secure Data Forms Missing Authentication for Critical Function |
| CVE-2026-102149 | KI Kiteworks Accellion | 9.4 | Sep 30 | Kiteworks Email Protection Gateway Improper Access Control |
| CVE-2026-102147 | KI Kiteworks Accellion | 9.3 | Sep 30 | Kiteworks Core Administrative Account Takeover through Stored Cross-site Scripting (XSS) |
| CVE-2026-102146 | KI Kiteworks Accellion | 6.5 | Sep 30 | Kiteworks Email Protection Gateway Arbitrary File Write through Server-Side Template Injection |
| CVE-2026-102145 | KI Kiteworks Accellion | 6.6 | Sep 30 | Kiteworks Core Server-Side Request Forgery through CRLF Injection |
| CVE-2026-102097 | KI Kiteworks Accellion | 7.2 | Sep 30 | Kiteworks Email Protection Gateway remote code execution |
| CVE-2026-102096 | KI Kiteworks Accellion | 7.2 | Sep 30 | Kiteworks Core OS command injection |
| CVE-2026-102099 | KI Kiteworks Accellion | 7.2 | Sep 30 | Kiteworks Core arbitrary file write |
| CVE-2026-102095 | KI Kiteworks Accellion | 9.1 | Sep 30 | Kiteworks Email Protection Gateway server-side request forgery |
| CVE-2026-102094 | KI Kiteworks Accellion | 7.2 | Sep 30 | Kiteworks Email Protection Gateway unsafe reflection |
| CVE-2026-102093 | KI Kiteworks Accellion | 7.2 | Sep 30 | Kiteworks Core improper privilege management |
| CVE-2026-102092 | KI Kiteworks Accellion | 8.7 | Sep 30 | Kiteworks Core stored XSS |
| CVE-2026-102091 | KI Kiteworks Accellion | 7.5 | Sep 30 | Kiteworks Secure Data Forms server-side request forgery |
| CVE-2026-102090 | KI Kiteworks Accellion | 4.3 | Sep 30 | Kiteworks Core content injection |
| CVE-2026-102098 | KI Kiteworks Accellion | 7.2 | Sep 30 | Kiteworks Core SQL Injection |