Security-advisories (Kiteworks) - vulnerabilities (CVEs)
10 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2026-06-01. Vendor: Kiteworks.
CVEs of Security-advisories
- CVE-2026-24754 - CVSS 5.4 (medium), 2026-06-01: Kiteworks is a private data network (PDN). Prior to version 9.3.0, a stored XSS vulnerability in Kiteworks Secure Data Forms could allow an authenticated…
- CVE-2026-28271 - CVSS 6.5 (medium), 2026-02-27: Kiteworks is a private data network (PDN). Prior to version 9.2.0, a vulnerability in Kiteworks configuration functionality allows bypassing of SSRF…
- CVE-2026-28270 - CVSS 7.2 (high), 2026-02-27: Kiteworks is a private data network (PDN). Prior to version 9.2.0, a vulnerability in Kiteworks configuration allows uploading of arbitrary files without…
- CVE-2026-28272 - CVSS 8.1 (high), 2026-02-27: Kiteworks is a private data network (PDN). Prior to version 9.2.0, a vulnerability in Kiteworks Email Protection Gateway allows authenticated administrators…
- CVE-2026-28269 - CVSS 8.8 (high), 2026-02-26: Kiteworks is a private data network (PDN). Prior to version 9.2.0, avulnerability in Kiteworks command execution functionality allows authenticated users to…
- CVE-2025-53939 - CVSS 8.8 (high), 2025-11-29: Kiteworks is a private data network (PDN). Prior to version 9.1.0, improper input validation when managing roles of a shared folder could lead to unexpectedly…
- CVE-2025-53897 - CVSS 6.8 (medium), 2025-11-29: Kiteworks MFT orchestrates end-to-end file transfer workflows. Prior to version 9.1.0, this vulnerability could allow an external attacker to gain access to…
- CVE-2025-53896 - CVSS 8.1 (high), 2025-11-29: Kiteworks MFT orchestrates end-to-end file transfer workflows. Prior to version 9.1.0, a bug in Kiteworks MFT could cause under certain circumstances that a…
- CVE-2025-53900 - CVSS 8.8 (high), 2025-11-29: Kiteworks MFT orchestrates end-to-end file transfer workflows. Prior to version 9.1.0, an unfavourable definition of roles and permissions in Kiteworks MFT on…
- CVE-2025-53899 - CVSS 7.2 (high), 2025-11-29: Kiteworks MFT orchestrates end-to-end file transfer workflows. Prior to version 9.1.0, the back-end of Kiteworks MFT is vulnerable to an incorrectly specified…
