VendorsAccellionkiteworksall versions
Vulnerabilities

Accellion kiteworks

Ranked by severity, then by exploit likelihood, unless you sort otherwise. Click a CVE ID for its full record.

83CVEs
CVE-2026-102115
Kiteworks Core Authentication Bypass in the Password Reset Workflow
Published 2026-09-30 · Analyzed
9.8EPSS 0.010
CVE-2026-102149
Kiteworks Email Protection Gateway Improper Access Control
Published 2026-09-30 · Analyzed
9.4EPSS 0.002
CVE-2026-102147
Kiteworks Core Administrative Account Takeover through Stored Cross-site Scripting (XSS)
Published 2026-09-30 · Analyzed
9.3EPSS 0.005
CVE-2026-102106
Kiteworks Email Protection Gateway improper authentication
Published 2026-09-30 · Analyzed
9.1EPSS 0.011
CVE-2026-102102
Kiteworks Email Protection Gateway server-side request forgery
Published 2026-09-30 · Analyzed
9.1EPSS 0.008
CVE-2026-102103
Kiteworks Email Protection Gateway server-side request forgery
Published 2026-09-30 · Analyzed
9.1EPSS 0.007
CVE-2026-102104
Kiteworks Email Protection Gateway server-side request forgery
Published 2026-09-30 · Analyzed
9.1EPSS 0.007
CVE-2026-102105
Kiteworks Email Protection Gateway server-side request forgery
Published 2026-09-30 · Analyzed
9.1EPSS 0.005
CVE-2026-102095
Kiteworks Email Protection Gateway server-side request forgery
Published 2026-09-30 · Analyzed
9.1EPSS 0.004
CVE-2021-31586
Accellion Kiteworks before 7.4.0 allows an authenticated user to perform SQL Injection via LDAPGroup Search.
Published 2021-06-23 · Modified
8.8EPSS 0.441
CVE-2026-28269
Kiteworks Core has an OS Command Injection
Published 2026-02-26 · Analyzed
8.8EPSS 0.022
CVE-2026-23514
Kiteworks Core before 9.2.2 is vulnerable to Improper Ownership Management
Published 2026-03-25 · Analyzed
8.8EPSS 0.011
CVE-2025-53939
Kiteworks Core is vulnerable to Improper Input Validation
Published 2025-11-29 · Analyzed
8.8EPSS 0.008
CVE-2026-24782
Kiteworks Secure Data Forms has a SQL Injection vulnerability
Published 2026-06-01 · Analyzed
8.8EPSS 0.007
CVE-2026-102120
Kiteworks Core OS Command Injection
Published 2026-09-30 · Analyzed
8.8EPSS 0.004
CVE-2026-102125
Kiteworks Core Sandbox Escape
Published 2026-09-30 · Analyzed
8.8EPSS 0.004
CVE-2026-102100
Kiteworks Core stored XSS
Published 2026-09-30 · Analyzed
8.7EPSS 0.003
CVE-2026-102092
Kiteworks Core stored XSS
Published 2026-09-30 · Analyzed
8.7EPSS 0.003
CVE-2026-102121
Kiteworks Secure Data Forms Exposure of Sensitive Information to an Unauthorized Actor
Published 2026-09-30 · Analyzed
8.6EPSS 0.005
CVE-2026-24751
Kiteworks Secure Data Forms Vulnerable to Cross-site Scripting
Published 2026-06-01 · Analyzed
8.2EPSS 0.003
CVE-2026-24752
Kiteworks Secure Data Forms Vulnerable to Cross-site Scripting
Published 2026-06-01 · Analyzed
8.2EPSS 0.003
CVE-2026-102101
Kiteworks Core deserialization of untrusted data
Published 2026-09-30 · Analyzed
8.1EPSS 0.009
CVE-2026-28272
Kiteworks Email Protection Gateway has a Cross-site Scripting vulnerability
Published 2026-02-27 · Analyzed
8.1EPSS 0.004
CVE-2026-102126
Kiteworks Core Stored Cross-site Scripting (XSS)
Published 2026-09-30 · Analyzed
8.1EPSS 0.003
CVE-2026-102118
Kiteworks Core before version 9.5.0 is vulnerable to Local Privilege Escalation
Published 2026-09-30 · Analyzed
7.8EPSS 0.004
CVE-2026-102113
Kiteworks Core Local Privilege Escalation
Published 2026-09-30 · Analyzed
7.8EPSS 0.004
CVE-2026-102112
Kiteworks Core Local Privilege Escalation
Published 2026-09-30 · Analyzed
7.8EPSS 0.004
CVE-2026-24750
Kiteworks Secure Data Forms vulnerable to Cross-site Scripting
Published 2026-03-25 · Analyzed
7.6EPSS 0.002
CVE-2026-102143
Kiteworks Email Protection Gateway Unrestricted Upload of File with Dangerous Type
Published 2026-09-30 · Analyzed
7.5EPSS 0.003
CVE-2026-102091
Kiteworks Secure Data Forms server-side request forgery
Published 2026-09-30 · Analyzed
7.5EPSS 0.003
CVE-2026-29092
Kiteworks Email Protection Gateway has an Insufficient Session Expiration
Published 2026-03-25 · Analyzed
7.5EPSS 0.002
CVE-2026-102128
Kiteworks Email Protection Gateway Improper Authentication
Published 2026-09-30 · Analyzed
7.5EPSS 0.002
CVE-2026-102123
Kiteworks Core Path Traversal
Published 2026-09-30 · Analyzed
7.4EPSS 0.010
CVE-2026-102096
Kiteworks Core OS command injection
Published 2026-09-30 · Analyzed
7.2EPSS 0.033
CVE-2026-102114
Kiteworks Core OS Command Injection
Published 2026-09-30 · Analyzed
7.2EPSS 0.031
CVE-2026-102097
Kiteworks Email Protection Gateway remote code execution
Published 2026-09-30 · Analyzed
7.2EPSS 0.022
CVE-2026-102099
Kiteworks Core arbitrary file write
Published 2026-09-30 · Analyzed
7.2EPSS 0.020
CVE-2026-102116
Kiteworks Email Protection Gateway Path Traversal
Published 2026-09-30 · Analyzed
7.2EPSS 0.020
CVE-2026-28270
Kiteworks Core has an Unrestricted Upload of File with Dangerous Type
Published 2026-02-27 · Analyzed
7.2EPSS 0.018
CVE-2026-102089
Kiteworks Email Protection Gateway path traversal
Published 2026-09-30 · Analyzed
7.2EPSS 0.015
1 / 3Next →