KI
Vendor
Kiteworks
70
CVEs
0
On KEV
61
New 30D
Products
CO9.8
Core
Kiteworks
35 CVEs0 on KEV35 new
EP9.4
Email Protection Gateway
Kiteworks
22 CVEs0 on KEV22 new
SD8.8
Secure Data Forms
kiteworks
12 CVEs0 on KEV4 new
SE5.4
security-advisories
kiteworks
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-102105 | EP Email Protection Gateway Kiteworks | 9.1 | Sep 30 | Kiteworks Email Protection Gateway server-side request forgery |
| CVE-2026-102106 | EP Email Protection Gateway Kiteworks | 9.1 | Sep 30 | Kiteworks Email Protection Gateway improper authentication |
| CVE-2026-102107 | CO Core Kiteworks | 4.6 | Sep 30 | Kiteworks Core user impersonation in a file-request feature |
| CVE-2026-102108 | EP Email Protection Gateway Kiteworks | 7.2 | Sep 30 | Kiteworks Email Protection Gateway deserialization of untrusted data |
| CVE-2026-102109 | SD Secure Data Forms Kiteworks | 7.1 | Sep 30 | Kiteworks Secure Data Forms SQL injection |
| CVE-2026-102110 | CO Core Kiteworks | 5.9 | Sep 30 | Missing authentication on a Kiteworks appliance setup function |
| CVE-2026-102111 | CO Core Kiteworks | 4.9 | Sep 30 | Kiteworks Core Improper Validation of Specified Quantity in Input |
| CVE-2026-102112 | CO Core Kiteworks | 7.8 | Sep 30 | Kiteworks Core Local Privilege Escalation |
| CVE-2026-102113 | CO Core Kiteworks | 7.8 | Sep 30 | Kiteworks Core Local Privilege Escalation |
| CVE-2026-102114 | CO Core Kiteworks | 7.2 | Sep 30 | Kiteworks Core OS Command Injection |
| CVE-2026-102115 | CO Core Kiteworks | 9.8 | Sep 30 | Kiteworks Core Authentication Bypass in the Password Reset Workflow |
| CVE-2026-102116 | EP Email Protection Gateway Kiteworks | 7.2 | Sep 30 | Kiteworks Email Protection Gateway Path Traversal |
| CVE-2026-102117 | CO Core Kiteworks | 7.2 | Sep 30 | Kiteworks Core Remote Code Execution |
| CVE-2026-102118 | CO Core Kiteworks | 7.8 | Sep 30 | Kiteworks Core before version 9.5.0 is vulnerable to Local Privilege Escalation |
| CVE-2026-102119 | EP Email Protection Gateway Kiteworks | 7.2 | Sep 30 | Kiteworks Email Protection Gateway Path Traversal |
| CVE-2026-102120 | CO Core Kiteworks | 8.8 | Sep 30 | Kiteworks Core OS Command Injection |
| CVE-2026-102121 | SD Secure Data Forms Kiteworks | 8.6 | Sep 30 | Kiteworks Secure Data Forms Exposure of Sensitive Information to an Unauthorized Actor |
| CVE-2026-102104 | EP Email Protection Gateway Kiteworks | 9.1 | Sep 30 | Kiteworks Email Protection Gateway server-side request forgery |
| CVE-2026-102122 | CO Core Kiteworks | 4.3 | Sep 30 | Kiteworks Core Incorrect Authorization |
| CVE-2026-102123 | CO Core Kiteworks | 7.4 | Sep 30 | Kiteworks Core Path Traversal |
| CVE-2026-102103 | EP Email Protection Gateway Kiteworks | 9.1 | Sep 30 | Kiteworks Email Protection Gateway server-side request forgery |
| CVE-2026-102124 | CO Core Kiteworks | 6.5 | Sep 30 | Kiteworks Core Missing Authentication for Critical Function |
| CVE-2026-102125 | CO Core Kiteworks | 8.8 | Sep 30 | Kiteworks Core Sandbox Escape |
| CVE-2026-102126 | CO Core Kiteworks | 8.1 | Sep 30 | Kiteworks Core Stored Cross-site Scripting (XSS) |
| CVE-2026-102127 | EP Email Protection Gateway Kiteworks | 7.0 | Sep 30 | Kiteworks Email Protection Gateway Improper Restriction of XML External Entity Reference |
| CVE-2026-102128 | EP Email Protection Gateway Kiteworks | 7.5 | Sep 30 | Kiteworks Email Protection Gateway Improper Authentication |
| CVE-2026-102129 | CO Core Kiteworks | 7.2 | Sep 30 | Kiteworks Core Incorrect Privilege Assignment |
| CVE-2026-102130 | EP Email Protection Gateway Kiteworks | 7.2 | Sep 30 | Kiteworks Email Protection Gateway Remote Code Execution |
| CVE-2026-102131 | EP Email Protection Gateway Kiteworks | 7.2 | Sep 30 | Kiteworks Email Protection Gateway Improper Handling of Case Sensitivity |
| CVE-2026-102132 | CO Core Kiteworks | 7.2 | Sep 30 | Kiteworks Core Privilege Escalation through Improper Access Control |
| CVE-2026-102133 | CO Core Kiteworks | 6.6 | Sep 30 | Kiteworks Core Arbitrary File Write through Command Injection |
| CVE-2026-102102 | EP Email Protection Gateway Kiteworks | 9.1 | Sep 30 | Kiteworks Email Protection Gateway server-side request forgery |
| CVE-2026-102134 | CO Core Kiteworks | 5.4 | Sep 30 | Kiteworks Core Unprotected Alternate Channel |
| CVE-2026-102135 | EP Email Protection Gateway Kiteworks | 6.6 | Sep 30 | Kiteworks Email Protection Gateway Deserialization of Untrusted Data |
| CVE-2026-102136 | CO Core Kiteworks | 6.3 | Sep 30 | Kiteworks Core Command Execution through Configuration Injection |
| CVE-2026-102137 | CO Core Kiteworks | 4.1 | Sep 30 | Kiteworks Core Unrestricted Upload of File with Dangerous Type |
| CVE-2026-102138 | CO Core Kiteworks | 3.3 | Sep 30 | Kiteworks Core Server-Side Request Forgery (SSRF) |
| CVE-2026-102101 | CO Core Kiteworks | 8.1 | Sep 30 | Kiteworks Core deserialization of untrusted data |
| CVE-2026-102139 | EP Email Protection Gateway Kiteworks | 6.5 | Sep 30 | Kiteworks Email Protection Gateway Incorrect Authorization |
| CVE-2026-102140 | CO Core Kiteworks | 4.9 | Sep 30 | Kiteworks Core Insufficient Verification of Data Authenticity |
| CVE-2026-102141 | CO Core Kiteworks | 6.7 | Sep 30 | Kiteworks Core Privilege Escalation through External Control of File Name or Path |
| CVE-2026-102142 | CO Core Kiteworks | 7.2 | Sep 30 | Kiteworks Core Remote Code Execution through Server-Side Template Injection |
| CVE-2026-102143 | EP Email Protection Gateway Kiteworks | 7.5 | Sep 30 | Kiteworks Email Protection Gateway Unrestricted Upload of File with Dangerous Type |
| CVE-2026-102100 | CO Core Kiteworks | 8.7 | Sep 30 | Kiteworks Core stored XSS |
| CVE-2026-102144 | EP Email Protection Gateway Kiteworks | 5.3 | Sep 30 | Kiteworks Email Protection Gateway Uncontrolled Resource Consumption |
| CVE-2026-102150 | SD Secure Data Forms Kiteworks | 7.2 | Sep 30 | Kiteworks Secure Data Forms Missing Authentication for Critical Function |
| CVE-2026-102149 | EP Email Protection Gateway Kiteworks | 9.4 | Sep 30 | Kiteworks Email Protection Gateway Improper Access Control |
| CVE-2026-102147 | CO Core Kiteworks | 9.3 | Sep 30 | Kiteworks Core Administrative Account Takeover through Stored Cross-site Scripting (XSS) |
| CVE-2026-102146 | EP Email Protection Gateway Kiteworks | 6.5 | Sep 30 | Kiteworks Email Protection Gateway Arbitrary File Write through Server-Side Template Injection |
| CVE-2026-102145 | CO Core Kiteworks | 6.6 | Sep 30 | Kiteworks Core Server-Side Request Forgery through CRLF Injection |
| CVE-2026-102097 | EP Email Protection Gateway Kiteworks | 7.2 | Sep 30 | Kiteworks Email Protection Gateway remote code execution |
| CVE-2026-102096 | CO Core Kiteworks | 7.2 | Sep 30 | Kiteworks Core OS command injection |
| CVE-2026-102099 | CO Core Kiteworks | 7.2 | Sep 30 | Kiteworks Core arbitrary file write |
| CVE-2026-102095 | EP Email Protection Gateway Kiteworks | 9.1 | Sep 30 | Kiteworks Email Protection Gateway server-side request forgery |
| CVE-2026-102094 | EP Email Protection Gateway Kiteworks | 7.2 | Sep 30 | Kiteworks Email Protection Gateway unsafe reflection |
| CVE-2026-102093 | CO Core Kiteworks | 7.2 | Sep 30 | Kiteworks Core improper privilege management |
| CVE-2026-102092 | CO Core Kiteworks | 8.7 | Sep 30 | Kiteworks Core stored XSS |
| CVE-2026-102091 | SD Secure Data Forms Kiteworks | 7.5 | Sep 30 | Kiteworks Secure Data Forms server-side request forgery |
| CVE-2026-102090 | CO Core Kiteworks | 4.3 | Sep 30 | Kiteworks Core content injection |
| CVE-2026-102098 | CO Core Kiteworks | 7.2 | Sep 30 | Kiteworks Core SQL Injection |