CVE-2026-28271mediumCWE-350CWE-918

CVE-2026-28271: medium-severity vulnerability in kiteworks security-advisories

Kiteworks Core is vulnerable to Server-Side Request Forgery (SSRF)

Published · Updated

Follow this CVE+ Monitor security-advisories

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.5epss 0.5%
In short

Kiteworks, a file-sharing platform, had a flaw that allowed administrators with bad intentions to bypass security protections and access internal services they shouldn't be able to reach by manipulating DNS settings.

Technical detail

A Server-Side Request Forgery (SSRF) vulnerability in Kiteworks prior to v9.2.0 allows authenticated administrative users to circumvent SSRF protections via DNS rebinding attacks, enabling unauthorized access to internal network services. The vulnerability requires administrative privileges and relies on manipulation of DNS resolution to redirect requests from the application server to restricted internal endpoints.

Summary generated and translated by AI from the official description.
Kiteworks is a private data network (PDN). Prior to version 9.2.0, a vulnerability in Kiteworks configuration functionality allows bypassing of SSRF protections through DNS rebinding attacks. Malicious administrators could exploit this to access internal services that should be restricted. Version 9.2.0 contains a patch for the issue.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Affected products
kiteworks · security-advisories
Related CVEs — kiteworks security-advisories

In the same product, most dangerous first.

CVE-2026-28269MEDIUMKiteworks Core has an OS Command InjectionEPSS 2.2%CVE-2026-28270MEDIUMKiteworks Core has an Unrestricted Upload of File with Dangerous TypeEPSS 1.8%CVE-2025-53900MEDIUMKiteworks MFT has a Privilege Defined With Unsafe ActionsEPSS 1.2%CVE-2025-53899HIGHKiteworks MFT is vulnerable to an Incorrectly Specified Destination in a Communication ChannelEPSS 1.0%CVE-2025-53939MEDIUMKiteworks Core is vulnerable to Improper Input ValidationEPSS 0.8%CVE-2026-28272HIGHKiteworks Email Protection Gateway has a Cross-site Scripting vulnerabilityEPSS 0.4%