Kiteworks vulnerabilities
86 CVEs and advisories name Kiteworks as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-102098Kiteworks Core SQL Injection
- CVE-2026-102089Kiteworks Email Protection Gateway path traversal
- CVE-2026-24782Kiteworks Secure Data Forms has a SQL Injection vulnerability
- CVE-2026-24761Kiteworks Secure Data Forms is vulnerable to Authorization Bypass Through User-Controlled Key
- CVE-2026-24756Kiteworks Secure Data Forms is vulnerable to Authorization Bypass Through User-Controlled Key
- CVE-2026-24755Kiteworks Secure Data Forms is vulnerable to Authorization Bypass Through User-Controlled Key
- CVE-2026-24754Kiteworks Secure Data Forms Vulnerable to Cross-site Scripting
- CVE-2026-24753Kiteworks Secure Data Forms is vulnerable to Authorization Bypass Through User-Controlled Key
- CVE-2026-24752Kiteworks Secure Data Forms Vulnerable to Cross-site Scripting
- CVE-2026-24751Kiteworks Secure Data Forms Vulnerable to Cross-site Scripting
- CVE-2026-23638Kiteworks Secure Data Forms is vulnerable to Authorization Bypass Through User-Controlled Key
- CVE-2026-29092Kiteworks Email Protection Gateway has an Insufficient Session Expiration
- CVE-2026-23636Kiteworks Secure Data Forms is vulnerable to an Unrestricted Upload of File with Dangerous Type
- CVE-2026-23635Kiteworks Secure Data Forms has a potential Unprotected Transport of Credentials
- CVE-2026-24750Kiteworks Secure Data Forms vulnerable to Cross-site Scripting
- CVE-2026-23514Kiteworks Core before 9.2.2 is vulnerable to Improper Ownership Management
- CVE-2026-28272Kiteworks Email Protection Gateway has a Cross-site Scripting vulnerability
- CVE-2026-28271Kiteworks Core is vulnerable to Server-Side Request Forgery (SSRF)
- CVE-2026-28270Kiteworks Core has an Unrestricted Upload of File with Dangerous Type
- CVE-2026-28269Kiteworks Core has an OS Command Injection
- CVE-2025-53939Kiteworks Core is vulnerable to Improper Input Validation
- CVE-2025-53900Kiteworks MFT has a Privilege Defined With Unsafe Actions
- CVE-2025-53899Kiteworks MFT is vulnerable to an Incorrectly Specified Destination in a Communication Channel
- CVE-2025-53897Kiteworks MFT has a Cross-Site Request Forgery (CSRF) vulnerability
- CVE-2025-53896Kiteworks MFT is vulnerable to Insufficient Session Expiration
- CVE-2023-7273Cross Site Request Forgery in Kiteworks OwnCloud