CVEs we hold for Kiteworks

Records whose assigning authority named Kiteworks as the affected vendor. Newest identifiers first, capped at 200.

CVE-2026-29092Kiteworks Email Protection Gateway has an Insufficient Session ExpirationKiteworks Email Protection Gateway

CVE-2026-28272Kiteworks Email Protection Gateway has a Cross-site Scripting vulnerabilitykiteworks security-advisories

CVE-2026-28271Kiteworks Core is vulnerable to Server-Side Request Forgery (SSRF)kiteworks security-advisories

CVE-2026-28270Kiteworks Core has an Unrestricted Upload of File with Dangerous Typekiteworks security-advisories

CVE-2026-28269Kiteworks Core has an OS Command Injectionkiteworks security-advisories

CVE-2026-24782Kiteworks Secure Data Forms has a SQL Injection vulnerabilitykiteworks Secure Data Forms

CVE-2026-24761Kiteworks Secure Data Forms is vulnerable to Authorization Bypass Through User-Controlled Keykiteworks Secure Data Forms

CVE-2026-24756Kiteworks Secure Data Forms is vulnerable to Authorization Bypass Through User-Controlled Keykiteworks Secure Data Forms

CVE-2026-24755Kiteworks Secure Data Forms is vulnerable to Authorization Bypass Through User-Controlled Keykiteworks Secure Data Forms

CVE-2026-24754Kiteworks Secure Data Forms Vulnerable to Cross-site Scriptingkiteworks security-advisories

CVE-2026-24753Kiteworks Secure Data Forms is vulnerable to Authorization Bypass Through User-Controlled Keykiteworks Secure Data Forms

CVE-2026-24752Kiteworks Secure Data Forms Vulnerable to Cross-site Scriptingkiteworks Secure Data Forms

CVE-2026-24751Kiteworks Secure Data Forms Vulnerable to Cross-site Scriptingkiteworks Secure Data Forms

CVE-2026-24750Kiteworks Secure Data Forms vulnerable to Cross-site Scriptingkiteworks Secure Data Forms

CVE-2026-23638Kiteworks Secure Data Forms is vulnerable to Authorization Bypass Through User-Controlled Keykiteworks Secure Data Forms

CVE-2026-23636Kiteworks Secure Data Forms is vulnerable to an Unrestricted Upload of File with Dangerous Typekiteworks Secure Data Forms

CVE-2026-23635Kiteworks Secure Data Forms has a potential Unprotected Transport of Credentialskiteworks Secure Data Forms

CVE-2026-23514Kiteworks Core before 9.2.2 is vulnerable to Improper Ownership Managementkiteworks core

CVE-2026-102150Kiteworks Secure Data Forms Missing Authentication for Critical FunctionKiteworks Secure Data Forms

CVE-2026-102149Kiteworks Email Protection Gateway Improper Access ControlKiteworks Email Protection Gateway

CVE-2026-102147Kiteworks Core Administrative Account Takeover through Stored Cross-site Scripting (XSS)Kiteworks Core

CVE-2026-102146Kiteworks Email Protection Gateway Arbitrary File Write through Server-Side Template InjectionKiteworks Email Protection Gateway

CVE-2026-102145Kiteworks Core Server-Side Request Forgery through CRLF InjectionKiteworks Core

CVE-2026-102144Kiteworks Email Protection Gateway Uncontrolled Resource ConsumptionKiteworks Email Protection Gateway

CVE-2026-102143Kiteworks Email Protection Gateway Unrestricted Upload of File with Dangerous TypeKiteworks Email Protection Gateway

CVE-2026-102142Kiteworks Core Remote Code Execution through Server-Side Template InjectionKiteworks Core

CVE-2026-102141Kiteworks Core Privilege Escalation through External Control of File Name or PathKiteworks Core

CVE-2026-102140Kiteworks Core Insufficient Verification of Data AuthenticityKiteworks Core

CVE-2026-102139Kiteworks Email Protection Gateway Incorrect AuthorizationKiteworks Email Protection Gateway

CVE-2026-102138Kiteworks Core Server-Side Request Forgery (SSRF)Kiteworks Core

CVE-2026-102137Kiteworks Core Unrestricted Upload of File with Dangerous TypeKiteworks Core

CVE-2026-102136Kiteworks Core Command Execution through Configuration InjectionKiteworks Core

CVE-2026-102135Kiteworks Email Protection Gateway Deserialization of Untrusted DataKiteworks Email Protection Gateway

CVE-2026-102134Kiteworks Core Unprotected Alternate ChannelKiteworks Core

CVE-2026-102133Kiteworks Core Arbitrary File Write through Command InjectionKiteworks Core

CVE-2026-102132Kiteworks Core Privilege Escalation through Improper Access ControlKiteworks Core

CVE-2026-102131Kiteworks Email Protection Gateway Improper Handling of Case SensitivityKiteworks Email Protection Gateway

CVE-2026-102130Kiteworks Email Protection Gateway Remote Code ExecutionKiteworks Email Protection Gateway

CVE-2026-102129Kiteworks Core Incorrect Privilege AssignmentKiteworks Core

CVE-2026-102128Kiteworks Email Protection Gateway Improper AuthenticationKiteworks Email Protection Gateway

CVE-2026-102127Kiteworks Email Protection Gateway Improper Restriction of XML External Entity ReferenceKiteworks Email Protection Gateway

CVE-2026-102126Kiteworks Core Stored Cross-site Scripting (XSS)Kiteworks Core

CVE-2026-102125Kiteworks Core Sandbox EscapeKiteworks Core

CVE-2026-102124Kiteworks Core Missing Authentication for Critical FunctionKiteworks Core

CVE-2026-102123Kiteworks Core Path TraversalKiteworks Core

CVE-2026-102122Kiteworks Core Incorrect AuthorizationKiteworks Core

CVE-2026-102121Kiteworks Secure Data Forms Exposure of Sensitive Information to an Unauthorized ActorKiteworks Secure Data Forms

CVE-2026-102120Kiteworks Core OS Command InjectionKiteworks Core

CVE-2026-102119Kiteworks Email Protection Gateway Path TraversalKiteworks Email Protection Gateway

CVE-2026-102118Kiteworks Core before version 9.5.0 is vulnerable to Local Privilege EscalationKiteworks Core

CVE-2026-102117Kiteworks Core Remote Code ExecutionKiteworks Core

CVE-2026-102116Kiteworks Email Protection Gateway Path TraversalKiteworks Email Protection Gateway

CVE-2026-102115Kiteworks Core Authentication Bypass in the Password Reset WorkflowKiteworks Core

CVE-2026-102114Kiteworks Core OS Command InjectionKiteworks Core

CVE-2026-102113Kiteworks Core Local Privilege EscalationKiteworks Core

CVE-2026-102112Kiteworks Core Local Privilege EscalationKiteworks Core

CVE-2026-102111Kiteworks Core Improper Validation of Specified Quantity in InputKiteworks Core

CVE-2026-102110Missing authentication on a Kiteworks appliance setup functionKiteworks Core

CVE-2026-102109Kiteworks Secure Data Forms SQL injectionKiteworks Secure Data Forms

CVE-2026-102108Kiteworks Email Protection Gateway deserialization of untrusted dataKiteworks Email Protection Gateway

CVE-2026-102107Kiteworks Core user impersonation in a file-request featureKiteworks Core

CVE-2026-102106Kiteworks Email Protection Gateway improper authenticationKiteworks Email Protection Gateway

CVE-2026-102105Kiteworks Email Protection Gateway server-side request forgeryKiteworks Email Protection Gateway

CVE-2026-102104Kiteworks Email Protection Gateway server-side request forgeryKiteworks Email Protection Gateway

CVE-2026-102103Kiteworks Email Protection Gateway server-side request forgeryKiteworks Email Protection Gateway

CVE-2026-102102Kiteworks Email Protection Gateway server-side request forgeryKiteworks Email Protection Gateway

CVE-2026-102101Kiteworks Core deserialization of untrusted dataKiteworks Core

CVE-2026-102100Kiteworks Core stored XSSKiteworks Core

CVE-2026-102099Kiteworks Core arbitrary file writeKiteworks Core

CVE-2026-102098Kiteworks Core SQL InjectionKiteworks Core

CVE-2026-102097Kiteworks Email Protection Gateway remote code executionKiteworks Email Protection Gateway

CVE-2026-102096Kiteworks Core OS command injectionKiteworks Core

CVE-2026-102095Kiteworks Email Protection Gateway server-side request forgeryKiteworks Email Protection Gateway

CVE-2026-102094Kiteworks Email Protection Gateway unsafe reflectionKiteworks Email Protection Gateway

CVE-2026-102093Kiteworks Core improper privilege managementKiteworks Core

CVE-2026-102092Kiteworks Core stored XSSKiteworks Core

CVE-2026-102091Kiteworks Secure Data Forms server-side request forgeryKiteworks Secure Data Forms

CVE-2026-102090Kiteworks Core content injectionKiteworks Core

CVE-2026-102089Kiteworks Email Protection Gateway path traversalKiteworks Email Protection Gateway

CVE-2025-53939Kiteworks Core is vulnerable to Improper Input Validationkiteworks security-advisories

CVE-2025-53900Kiteworks MFT has a Privilege Defined With Unsafe Actionskiteworks security-advisories

CVE-2025-53899Kiteworks MFT is vulnerable to an Incorrectly Specified Destination in a Communication Channelkiteworks security-advisories

CVE-2025-53897Kiteworks MFT has a Cross-Site Request Forgery (CSRF) vulnerabilitykiteworks security-advisories

CVE-2025-53896Kiteworks MFT is vulnerable to Insufficient Session Expirationkiteworks security-advisories

CVE-2023-7273Cross Site Request Forgery in Kiteworks OwnCloudKiteworks OwnCloud

85 records, read from the index as it stood on 18 Oct 2026. Every row opens the record it names, and every value on that record opens its own receipt.

Everything on this page is free. Public data. Withholding it protects nothing.