CVE-2026-102114

A command injection vulnerability exists in Kiteworks that allows a high-privileged authenticated administrator to execute arbitrary operating-system commands as root on the affected appliance node. Successful exploitation requires an administrative account with elevated privileges. No specific r...

CVE-2026-102115

Kiteworks Core is vulnerable to an authentication bypass in its password reset workflow due to insufficient validation of a submitted parameter. An unauthenticated attacker who possesses a user's email address can reset the account's password without needing access to the emailed reset link. This...

CVE-2026-102116

The Kiteworks Email Protection Gateway is vulnerable to a path traversal weakness. An authenticated administrator could potentially write a file outside its intended location and trigger the application to execute it. This could lead to remote code execution (RCE) under the privileges of the unde...

CVE-2026-102117

The Kiteworks Core platform is vulnerable to Remote Code Execution (RCE) when the remote-support capability is licensed and enabled. An authenticated System Administrator who possesses the key protecting the submitted data can redirect the system's outbound support connection to a destination of ...

CVE-2026-102118

A local privilege escalation vulnerability exists in Kiteworks Core versions prior to 9.5.0 . An attacker who already possesses a shell under a low-privileged service account can exploit this flaw to escalate their privileges to root on the appliance. The documents do not provide specific technic...

CVE-2026-102119

A path traversal weakness exists in an optional, non-default administrative feature of the Kiteworks Email Protection Gateway . This flaw allows an authenticated administrator to move files to unintended locations outside the designated directory, which could potentially lead to arbitrary code ex...

CVE-2026-102120

A privilege escalation vulnerability exists in Kiteworks due to insufficient input validation within an internal cluster management function. This flaw allows an attacker who already has code execution on one node of a clustered Kiteworks deployment to execute operating system commands with eleva...

CVE-2026-102121

The Kiteworks Secure Data Forms product contains a vulnerability in its Advanced Forms component where the form-rendering interface is reachable without authentication. While published forms are intended for anonymous visitors, the interface returns excessive data beyond what is required for the ...

CVE-2026-102104

Kiteworks Email Protection Gateway versions prior to 9.5.0 are vulnerable to a Server-Side Request Forgery (SSRF) . The flaw occurs during an online certificate status check for inbound messages, which can be triggered by a remote, unauthenticated attacker. This vulnerability allows the gateway t...

CVE-2026-102122

The Kiteworks Core platform contains an incorrect authorization vulnerability where the system fails to properly restrict role assignments for shared folders. In a default configuration, an authenticated user with the Manager role can escalate their privileges by granting themselves or other fold...

CVE-2026-102123

A path traversal vulnerability exists in the Kiteworks appliance setup interface because the system fails to confine user-supplied file paths to their intended directory. An unauthenticated attacker with network access to the interface could write files to any location writable by the service acc...

CVE-2026-102103

Kiteworks Email Protection Gateway versions before 9.5.0 are vulnerable to a Server-Side Request Forgery (SSRF) . This weakness occurs when the gateway retrieves a certificate revocation list from an inbound message, allowing a remote, unauthenticated attacker to induce the gateway to issue craft...

CVE-2026-102124

The Kiteworks appliance setup interface fails to enforce authentication after the initial configuration is complete. An unauthenticated attacker with network access can read and modify a limited set of setup records, specifically contact names and email addresses captured during the initial setup...

CVE-2026-102125

A sandbox escape vulnerability exists in the Kiteworks appliance , specifically within the component responsible for isolating document conversion . The underlying cause is that the sandbox fails to fully confine the code running inside it. An attacker who can execute code within this sandbox may...

CVE-2026-102126

A stored cross-site scripting (XSS) weakness exists in Kiteworks Core . An administrator with a single, narrowly scoped delegated permission can store crafted content that executes arbitrary JavaScript within the session of a System Administrator who views the page. This vulnerability could allow...

CVE-2026-102127

The Kiteworks Email Protection Gateway is vulnerable to an XML External Entity (XXE) injection due to an XML parser that does not restrict external entity references. If an optional, non-default message-processing feature is enabled, a remote and unauthenticated sender could submit a crafted mess...

CVE-2026-102128

The Kiteworks Email Protection Gateway contains an identity-verification weakness that allows the gateway to act on the Kiteworks platform on behalf of unauthenticated users. An attacker can exploit this to provision a platform account for an unknown identity, potentially leading to the unauthori...

CVE-2026-102129

A privilege escalation vulnerability exists in the user-provisioning interface of Kiteworks Core . The root cause is a failure to verify if the requesting administrator possesses the authorization required to grant specific roles. Consequently, an administrator with limited permissions for role c...

CVE-2026-102130

The Kiteworks Email Protection Gateway is vulnerable to Remote Code Execution (RCE) due to insufficient validation of uploaded backup content. An authenticated administrator can influence how the application loads these backups to execute arbitrary code on the gateway as the underlying service ac...

CVE-2026-102131

The Kiteworks Email Protection Gateway is vulnerable to an issue where it fails to properly handle case sensitivity during configuration validation. While the gateway rejects certain settings, its validation mechanism does not recognize every possible form in which these settings can be supplied....