Vulnerabilities in kiteworks
86 resultsCVE-2026-102095CRITICALKiteworks Email Protection Gateway server-side request forgeryEPSS 0.4%CVE-2026-102118HIGHKiteworks Core before version 9.5.0 is vulnerable to Local Privilege EscalationEPSS 0.4%CVE-2026-102139MEDIUMKiteworks Email Protection Gateway Incorrect AuthorizationEPSS 0.4%CVE-2026-102125HIGHKiteworks Core Sandbox EscapeEPSS 0.4%CVE-2026-102113HIGHKiteworks Core Local Privilege EscalationEPSS 0.4%CVE-2026-28272HIGHKiteworks Email Protection Gateway has a Cross-site Scripting vulnerabilityEPSS 0.4%CVE-2026-102112HIGHKiteworks Core Local Privilege EscalationEPSS 0.4%CVE-2026-102109HIGHKiteworks Secure Data Forms SQL injectionEPSS 0.4%CVE-2026-102144MEDIUMKiteworks Email Protection Gateway Uncontrolled Resource ConsumptionEPSS 0.4%CVE-2026-102100HIGHKiteworks Core stored XSSEPSS 0.3%CVE-2026-84473—CVE-2026-84473EPSS 0.3%CVE-2026-102126HIGHKiteworks Core Stored Cross-site Scripting (XSS)EPSS 0.3%CVE-2026-102092HIGHKiteworks Core stored XSSEPSS 0.3%CVE-2026-23635MEDIUMKiteworks Secure Data Forms has a potential Unprotected Transport of CredentialsEPSS 0.3%CVE-2026-102143HIGHKiteworks Email Protection Gateway Unrestricted Upload of File with Dangerous TypeEPSS 0.3%CVE-2026-102091HIGHKiteworks Secure Data Forms server-side request forgeryEPSS 0.3%CVE-2026-24751HIGHKiteworks Secure Data Forms Vulnerable to Cross-site ScriptingEPSS 0.3%CVE-2026-24752HIGHKiteworks Secure Data Forms Vulnerable to Cross-site ScriptingEPSS 0.3%CVE-2026-102145MEDIUMKiteworks Core Server-Side Request Forgery through CRLF InjectionEPSS 0.3%CVE-2026-102137MEDIUMKiteworks Core Unrestricted Upload of File with Dangerous TypeEPSS 0.3%