Kiteworks vulnerabilities
86 CVEs and advisories name Kiteworks as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-84473CVE-2026-84473
- CVE-2026-102105Kiteworks Email Protection Gateway server-side request forgery
- CVE-2026-102106Kiteworks Email Protection Gateway improper authentication
- CVE-2026-102107Kiteworks Core user impersonation in a file-request feature
- CVE-2026-102108Kiteworks Email Protection Gateway deserialization of untrusted data
- CVE-2026-102109Kiteworks Secure Data Forms SQL injection
- CVE-2026-102110Missing authentication on a Kiteworks appliance setup function
- CVE-2026-102111Kiteworks Core Improper Validation of Specified Quantity in Input
- CVE-2026-102112Kiteworks Core Local Privilege Escalation
- CVE-2026-102113Kiteworks Core Local Privilege Escalation
- CVE-2026-102114Kiteworks Core OS Command Injection
- CVE-2026-102115Kiteworks Core Authentication Bypass in the Password Reset Workflow
- CVE-2026-102116Kiteworks Email Protection Gateway Path Traversal
- CVE-2026-102117Kiteworks Core Remote Code Execution
- CVE-2026-102118Kiteworks Core before version 9.5.0 is vulnerable to Local Privilege Escalation
- CVE-2026-102119Kiteworks Email Protection Gateway Path Traversal
- CVE-2026-102120Kiteworks Core OS Command Injection
- CVE-2026-102121Kiteworks Secure Data Forms Exposure of Sensitive Information to an Unauthorized Actor
- CVE-2026-102104Kiteworks Email Protection Gateway server-side request forgery
- CVE-2026-102122Kiteworks Core Incorrect Authorization
- CVE-2026-102123Kiteworks Core Path Traversal
- CVE-2026-102103Kiteworks Email Protection Gateway server-side request forgery
- CVE-2026-102124Kiteworks Core Missing Authentication for Critical Function
- CVE-2026-102125Kiteworks Core Sandbox Escape
- CVE-2026-102126Kiteworks Core Stored Cross-site Scripting (XSS)
- CVE-2026-102127Kiteworks Email Protection Gateway Improper Restriction of XML External Entity Reference
- CVE-2026-102128Kiteworks Email Protection Gateway Improper Authentication
- CVE-2026-102129Kiteworks Core Incorrect Privilege Assignment
- CVE-2026-102130Kiteworks Email Protection Gateway Remote Code Execution
- CVE-2026-102131Kiteworks Email Protection Gateway Improper Handling of Case Sensitivity