Skip to content
Threat Feed
Subscribe

Tag

Kiteworks

3 briefs RSS
high advisory

Multiple Critical Vulnerabilities in Kiteworks Appliances

Kiteworks appliances are vulnerable to a suite of critical flaws, including remote code execution, SQL injection, and command injection, allowing for full system compromise, data exfiltration, and administrative account takeover.

Kiteworks vulnerability remote-code-execution injection
3t
high advisory

Kiteworks Core Access Control Vulnerability (CVE-2026-23514)

Kiteworks Core versions 9.2.0 and 9.2.1 contain an access control vulnerability (CVE-2026-23514) due to improper ownership management, allowing authenticated users to access unauthorized content, which can be mitigated by upgrading to version 9.2.2 or later.

access-control vulnerability kiteworks
2r 1t
medium advisory

Kiteworks Secure Data Forms Stored XSS Vulnerability (CVE-2026-24750)

An authenticated attacker can exploit a stored XSS vulnerability (CVE-2026-24750) in Kiteworks Secure Data Forms before version 9.2.1 due to improper neutralization of input, leading to arbitrary script execution in the context of other users.

Kiteworks Secure Data Forms xss web-application kiteworks
2r 1t 1i