Vulnerabilities in kiteworks
86 resultsCVE-2026-102150HIGHKiteworks Secure Data Forms Missing Authentication for Critical FunctionEPSS 0.2%CVE-2026-29092MEDIUMKiteworks Email Protection Gateway has an Insufficient Session ExpirationEPSS 0.2%CVE-2026-24750HIGHKiteworks Secure Data Forms vulnerable to Cross-site ScriptingEPSS 0.2%CVE-2026-102149CRITICALKiteworks Email Protection Gateway Improper Access ControlEPSS 0.2%CVE-2026-102110MEDIUMMissing authentication on a Kiteworks appliance setup functionEPSS 0.2%CVE-2025-53897MEDIUMKiteworks MFT has a Cross-Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%CVE-2023-7273MEDIUMCross Site Request Forgery in Kiteworks OwnCloudEPSS 0.2%CVE-2026-102111MEDIUMKiteworks Core Improper Validation of Specified Quantity in InputEPSS 0.2%CVE-2026-102128HIGHKiteworks Email Protection Gateway Improper AuthenticationEPSS 0.2%CVE-2026-102134MEDIUMKiteworks Core Unprotected Alternate ChannelEPSS 0.2%CVE-2025-53896HIGHKiteworks MFT is vulnerable to Insufficient Session ExpirationEPSS 0.2%CVE-2026-102124MEDIUMKiteworks Core Missing Authentication for Critical FunctionEPSS 0.2%CVE-2026-102090MEDIUMKiteworks Core content injectionEPSS 0.2%CVE-2026-102127HIGHKiteworks Email Protection Gateway Improper Restriction of XML External Entity ReferenceEPSS 0.2%CVE-2026-23638MEDIUMKiteworks Secure Data Forms is vulnerable to Authorization Bypass Through User-Controlled KeyEPSS 0.2%CVE-2026-102138LOWKiteworks Core Server-Side Request Forgery (SSRF)EPSS 0.2%CVE-2026-24753MEDIUMKiteworks Secure Data Forms is vulnerable to Authorization Bypass Through User-Controlled KeyEPSS 0.2%CVE-2026-102107MEDIUMKiteworks Core user impersonation in a file-request featureEPSS 0.2%CVE-2026-102122MEDIUMKiteworks Core Incorrect AuthorizationEPSS 0.2%CVE-2026-24756MEDIUMKiteworks Secure Data Forms is vulnerable to Authorization Bypass Through User-Controlled KeyEPSS 0.2%