CVE-2026-102114

A command injection vulnerability in Kiteworks could allow a high-privileged authenticated administrator to execute arbitrary operating-system commands as root on the affected appliance node. Successful exploitation requires an administrative account with elevated privileges...

CVE-2026-102112

A privilege escalation vulnerability in Kiteworks could allow an attacker who has already obtained code execution as an unprivileged backend service account on the appliance to escalate to root and run arbitrary commands with the highest privileges. Exploitation requires existing local access to...

EUVD-2026-90307

A privilege escalation vulnerability in Kiteworks could allow an attacker who has already obtained code execution as an unprivileged backend service account on the appliance to escalate to root and run arbitrary commands with the highest privileges. Exploitation requires existing local access to...

CVE-2026-102112 Kiteworks Core Local Privilege Escalation

A privilege escalation vulnerability in Kiteworks could allow an attacker who has already obtained code execution as an unprivileged backend service account on the appliance to escalate to root and run arbitrary commands with the highest privileges. Exploitation requires existing local access to...

CVE-2026-102112 Kiteworks Core Local Privilege Escalation

A privilege escalation vulnerability in Kiteworks could allow an attacker who has already obtained code execution as an unprivileged backend service account on the appliance to escalate to root and run arbitrary commands with the highest privileges. Exploitation requires existing local access to...

CVE-2026-102112

A privilege escalation vulnerability exists in Kiteworks , where an attacker with existing local access and code execution as an unprivileged backend service account on the appliance can escalate to root privileges. This allows the attacker to run arbitrary commands with the highest privileges. T...

EUVD-2026-90306

A privilege escalation vulnerability in Kiteworks could allow an attacker who has already obtained code execution as an unprivileged backend service account on the appliance to escalate to root. A privileged routine did not safely handle a filesystem path that the lower-privileged account could...

CVE-2026-102113 Kiteworks Core Local Privilege Escalation

A privilege escalation vulnerability in Kiteworks could allow an attacker who has already obtained code execution as an unprivileged backend service account on the appliance to escalate to root. A privileged routine did not safely handle a filesystem path that the lower-privileged account could...

CVE-2026-102113

A privilege escalation vulnerability exists in Kiteworks where an attacker with local code execution as an unprivileged backend service account on the appliance can escalate to root privileges. The root cause is a privileged routine that fails to safely handle a filesystem path influenced by the ...

CVE-2026-102113 Kiteworks Core Local Privilege Escalation

A privilege escalation vulnerability in Kiteworks could allow an attacker who has already obtained code execution as an unprivileged backend service account on the appliance to escalate to root. A privileged routine did not safely handle a filesystem path that the lower-privileged account could...

CVE-2026-102114 Kiteworks Core OS Command Injection

A command injection vulnerability in Kiteworks could allow a high-privileged authenticated administrator to execute arbitrary operating-system commands as root on the affected appliance node. Successful exploitation requires an administrative account with elevated privileges...

CVE-2026-102114

A command injection vulnerability exists in Kiteworks that allows a high-privileged authenticated administrator to execute arbitrary operating-system commands as root on the affected appliance node. Successful exploitation requires an administrative account with elevated privileges. No specific r...

CVE-2026-102114 Kiteworks Core OS Command Injection

A command injection vulnerability in Kiteworks could allow a high-privileged authenticated administrator to execute arbitrary operating-system commands as root on the affected appliance node. Successful exploitation requires an administrative account with elevated privileges...

EUVD-2026-90305

A command injection vulnerability in Kiteworks could allow a high-privileged authenticated administrator to execute arbitrary operating-system commands as root on the affected appliance node. Successful exploitation requires an administrative account with elevated privileges...

EUVD-2026-90301

A local privilege escalation vulnerability in Kiteworks could have allowed an attacker with an existing shell under a low-privileged service account to escalate to root privileges on the appliance...

CVE-2026-102118 Kiteworks Core before version 9.5.0 is vulnerable to Local Privilege Escalation

A local privilege escalation vulnerability in Kiteworks could have allowed an attacker with an existing shell under a low-privileged service account to escalate to root privileges on the appliance...

CVE-2026-102118

A local privilege escalation vulnerability exists in Kiteworks Core versions prior to 9.5.0 . An attacker who already possesses a shell under a low-privileged service account can exploit this flaw to escalate their privileges to root on the appliance. The documents do not provide specific technic...

CVE-2026-102118 Kiteworks Core before version 9.5.0 is vulnerable to Local Privilege Escalation

A local privilege escalation vulnerability in Kiteworks could have allowed an attacker with an existing shell under a low-privileged service account to escalate to root privileges on the appliance...

CVE-2026-102141 Kiteworks Core Privilege Escalation through External Control of File Name or Path

Two Kiteworks Core cluster-management operations did not validate file paths supplied to them, so an attacker holding root on one node of a cluster could write files as root onto another node and cause them to be executed there. Exploitation requires backend root access on a cluster node and a...

CVE-2026-102141

The Kiteworks Core software is vulnerable to privilege escalation because two cluster-management operations fail to validate supplied file paths. An attacker with root access on a single cluster node can write files as root onto another node, potentially leading to unauthorized execution of those...