Kiteworks / Core
35 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2026-102107 | Kiteworks Core user impersonation in a file-request feature | MEDIUM | 4.6 | Sep 30, 2026 |
| CVE-2026-102110 | Missing authentication on a Kiteworks appliance setup function | MEDIUM | 5.9 | Sep 30, 2026 |
| CVE-2026-102111 | Kiteworks Core Improper Validation of Specified Quantity in Input | MEDIUM | 4.9 | Sep 30, 2026 |
| CVE-2026-102112 | Kiteworks Core Local Privilege Escalation | HIGH | 7.8 | Sep 30, 2026 |
| CVE-2026-102113 | Kiteworks Core Local Privilege Escalation | HIGH | 7.8 | Sep 30, 2026 |
| CVE-2026-102114 | Kiteworks Core OS Command Injection | HIGH | 7.2 | Sep 30, 2026 |
| CVE-2026-102115 | Kiteworks Core Authentication Bypass in the Password Reset Workflow | CRITICAL | 9.8 | Sep 30, 2026 |
| CVE-2026-102117 | Kiteworks Core Remote Code Execution | HIGH | 7.2 | Sep 30, 2026 |
| CVE-2026-102118 | Kiteworks Core before version 9.5.0 is vulnerable to Local Privilege Escalation | HIGH | 7.8 | Sep 30, 2026 |
| CVE-2026-102120 | Kiteworks Core OS Command Injection | HIGH | 8.8 | Sep 30, 2026 |
| CVE-2026-102122 | Kiteworks Core Incorrect Authorization | MEDIUM | 4.3 | Sep 30, 2026 |
| CVE-2026-102123 | Kiteworks Core Path Traversal | HIGH | 7.4 | Sep 30, 2026 |
| CVE-2026-102124 | Kiteworks Core Missing Authentication for Critical Function | MEDIUM | 6.5 | Sep 30, 2026 |
| CVE-2026-102125 | Kiteworks Core Sandbox Escape | HIGH | 8.8 | Sep 30, 2026 |
| CVE-2026-102126 | Kiteworks Core Stored Cross-site Scripting (XSS) | HIGH | 8.1 | Sep 30, 2026 |
| CVE-2026-102129 | Kiteworks Core Incorrect Privilege Assignment | HIGH | 7.2 | Sep 30, 2026 |
| CVE-2026-102132 | Kiteworks Core Privilege Escalation through Improper Access Control | HIGH | 7.2 | Sep 30, 2026 |
| CVE-2026-102133 | Kiteworks Core Arbitrary File Write through Command Injection | MEDIUM | 6.6 | Sep 30, 2026 |
| CVE-2026-102134 | Kiteworks Core Unprotected Alternate Channel | MEDIUM | 5.4 | Sep 30, 2026 |
| CVE-2026-102136 | Kiteworks Core Command Execution through Configuration Injection | MEDIUM | 6.3 | Sep 30, 2026 |
| CVE-2026-102137 | Kiteworks Core Unrestricted Upload of File with Dangerous Type | MEDIUM | 4.1 | Sep 30, 2026 |
| CVE-2026-102138 | Kiteworks Core Server-Side Request Forgery (SSRF) | LOW | 3.3 | Sep 30, 2026 |
| CVE-2026-102101 | Kiteworks Core deserialization of untrusted data | HIGH | 8.1 | Sep 30, 2026 |
| CVE-2026-102140 | Kiteworks Core Insufficient Verification of Data Authenticity | MEDIUM | 4.9 | Sep 30, 2026 |
| CVE-2026-102141 | Kiteworks Core Privilege Escalation through External Control of File Name or Path | MEDIUM | 6.7 | Sep 30, 2026 |
Showing 1 to 25 of 35 CVEs