Vulnerabilities in kiteworks
86 resultsCVE-2026-102096HIGHKiteworks Core OS command injectionEPSS 3.3%CVE-2026-102114HIGHKiteworks Core OS Command InjectionEPSS 3.1%CVE-2026-28269MEDIUMKiteworks Core has an OS Command InjectionEPSS 2.2%CVE-2026-102097HIGHKiteworks Email Protection Gateway remote code executionEPSS 2.2%CVE-2026-102099HIGHKiteworks Core arbitrary file writeEPSS 2.0%CVE-2026-102116HIGHKiteworks Email Protection Gateway Path TraversalEPSS 2.0%CVE-2026-28270MEDIUMKiteworks Core has an Unrestricted Upload of File with Dangerous TypeEPSS 1.8%CVE-2026-102089HIGHKiteworks Email Protection Gateway path traversalEPSS 1.5%CVE-2026-102108HIGHKiteworks Email Protection Gateway deserialization of untrusted dataEPSS 1.5%CVE-2026-102094HIGHKiteworks Email Protection Gateway unsafe reflectionEPSS 1.5%CVE-2026-102119HIGHKiteworks Email Protection Gateway Path TraversalEPSS 1.4%CVE-2026-102117HIGHKiteworks Core Remote Code ExecutionEPSS 1.3%CVE-2026-102135MEDIUMKiteworks Email Protection Gateway Deserialization of Untrusted DataEPSS 1.3%CVE-2026-102133MEDIUMKiteworks Core Arbitrary File Write through Command InjectionEPSS 1.2%CVE-2025-53900MEDIUMKiteworks MFT has a Privilege Defined With Unsafe ActionsEPSS 1.2%CVE-2026-102142HIGHKiteworks Core Remote Code Execution through Server-Side Template InjectionEPSS 1.2%CVE-2026-102131HIGHKiteworks Email Protection Gateway Improper Handling of Case SensitivityEPSS 1.2%CVE-2026-102130HIGHKiteworks Email Protection Gateway Remote Code ExecutionEPSS 1.2%CVE-2026-102106CRITICALKiteworks Email Protection Gateway improper authenticationEPSS 1.1%CVE-2026-23514HIGHKiteworks Core before 9.2.2 is vulnerable to Improper Ownership ManagementEPSS 1.1%