CVE-2026-102098

Kiteworks Core before version 9.5.0 is vulnerable to SQL Injection. A stored SQL injection vulnerability in a Kiteworks administrative reporting feature could allow an authenticated administrator to read sensitive data from the underlying database and to affect the availability of the service...

CVE-2026-102098

Kiteworks Core versions prior to 9.5.0 are vulnerable to a stored SQL injection within an administrative reporting feature. This vulnerability allows an authenticated administrator with access to the affected reporting function to read sensitive data from the underlying database and potentially a...