Kiteworks vulnerabilities
86 CVEs and advisories name Kiteworks as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-102132Kiteworks Core Privilege Escalation through Improper Access Control
- CVE-2026-102133Kiteworks Core Arbitrary File Write through Command Injection
- CVE-2026-102102Kiteworks Email Protection Gateway server-side request forgery
- CVE-2026-102134Kiteworks Core Unprotected Alternate Channel
- CVE-2026-102135Kiteworks Email Protection Gateway Deserialization of Untrusted Data
- CVE-2026-102136Kiteworks Core Command Execution through Configuration Injection
- CVE-2026-102137Kiteworks Core Unrestricted Upload of File with Dangerous Type
- CVE-2026-102138Kiteworks Core Server-Side Request Forgery (SSRF)
- CVE-2026-102101Kiteworks Core deserialization of untrusted data
- CVE-2026-102139Kiteworks Email Protection Gateway Incorrect Authorization
- CVE-2026-102140Kiteworks Core Insufficient Verification of Data Authenticity
- CVE-2026-102141Kiteworks Core Privilege Escalation through External Control of File Name or Path
- CVE-2026-102142Kiteworks Core Remote Code Execution through Server-Side Template Injection
- CVE-2026-102143Kiteworks Email Protection Gateway Unrestricted Upload of File with Dangerous Type
- CVE-2026-102100Kiteworks Core stored XSS
- CVE-2026-102144Kiteworks Email Protection Gateway Uncontrolled Resource Consumption
- CVE-2026-102150Kiteworks Secure Data Forms Missing Authentication for Critical Function
- CVE-2026-102149Kiteworks Email Protection Gateway Improper Access Control
- CVE-2026-102147Kiteworks Core Administrative Account Takeover through Stored Cross-site Scripting (XSS)
- CVE-2026-102146Kiteworks Email Protection Gateway Arbitrary File Write through Server-Side Template Injection
- CVE-2026-102145Kiteworks Core Server-Side Request Forgery through CRLF Injection
- CVE-2026-102097Kiteworks Email Protection Gateway remote code execution
- CVE-2026-102096Kiteworks Core OS command injection
- CVE-2026-102099Kiteworks Core arbitrary file write
- CVE-2026-102095Kiteworks Email Protection Gateway server-side request forgery
- CVE-2026-102094Kiteworks Email Protection Gateway unsafe reflection
- CVE-2026-102093Kiteworks Core improper privilege management
- CVE-2026-102092Kiteworks Core stored XSS
- CVE-2026-102091Kiteworks Secure Data Forms server-side request forgery
- CVE-2026-102090Kiteworks Core content injection