CVE-2026-23635

Kiteworks is a private data network (PDN). In Kiteworks Secure Data Forms prior to version 9.2.1, a misconfiguration of the security attributes could potentially lead to Unprotected Transport of Credentials under certain circumstances. Upgrade Kiteworks to version 9.2.1 or later to receive a patch.

Score

CVSS 3.1 6.5 Medium

Status

Analyzed - security-advisories@github.com

Published

2026-03-25

Last modified

2026-03-25

Weaknesses

CWE-523

Affected products

• Kiteworks (Accellion)
• Secure Data Forms (Kiteworks)

References

• https://github.com/kiteworks/security-advisories/security/advisories/GHSA-9hw2-6qp4-3v8f