Kiteworks / Security-Advisories
10 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2026-24754 | Kiteworks Secure Data Forms Vulnerable to Cross-site Scripting | MEDIUM | 5.4 | Jun 1, 2026 |
| CVE-2026-28272 | Kiteworks Email Protection Gateway has a Cross-site Scripting vulnerability | HIGH | 8.1 | Feb 27, 2026 |
| CVE-2026-28271 | Kiteworks Core is vulnerable to Server-Side Request Forgery (SSRF) | MEDIUM | 6.5 | Feb 27, 2026 |
| CVE-2026-28270 | Kiteworks Core has an Unrestricted Upload of File with Dangerous Type | HIGH | 7.2 | Feb 27, 2026 |
| CVE-2026-28269 | Kiteworks Core has an OS Command Injection | HIGH | 8.8 | Feb 26, 2026 |
| CVE-2025-53939 | Kiteworks Core is vulnerable to Improper Input Validation | HIGH | 8.8 | Nov 29, 2025 |
| CVE-2025-53900 | Kiteworks MFT has a Privilege Defined With Unsafe Actions | HIGH | 8.8 | Nov 29, 2025 |
| CVE-2025-53899 | Kiteworks MFT is vulnerable to an Incorrectly Specified Destination in a Communication Channel | HIGH | 7.2 | Nov 29, 2025 |
| CVE-2025-53897 | Kiteworks MFT has a Cross-Site Request Forgery (CSRF) vulnerability | MEDIUM | 6.8 | Nov 29, 2025 |
| CVE-2025-53896 | Kiteworks MFT is vulnerable to Insufficient Session Expiration | HIGH | 8.1 | Nov 29, 2025 |
Showing 1 to 10 of 10 CVEs