Accellion Kiteworks vulnerabilities

• accellion kiteworks, kiteworks email protection gateway +1 more Kiteworks Email Protection Gateway server-side request forgery CVE-2026-102105 9.1 CriticalSeptember 30, 2026
• accellion kiteworks, kiteworks email protection gateway +1 more Kiteworks Email Protection Gateway improper authentication CVE-2026-102106 9.1 CriticalSeptember 30, 2026
• accellion kiteworks, kiteworks core +1 more Kiteworks Core user impersonation in a file-request feature CVE-2026-102107 4.6 MediumSeptember 30, 2026
• accellion kiteworks, kiteworks email protection gateway +1 more Kiteworks Email Protection Gateway deserialization of untrusted data CVE-2026-102108 7.2 HighSeptember 30, 2026
• accellion kiteworks, kiteworks secure data forms +1 more Kiteworks Secure Data Forms SQL injection CVE-2026-102109 7.1 HighSeptember 30, 2026
• accellion kiteworks, kiteworks core +1 more Missing authentication on a Kiteworks appliance setup function CVE-2026-102110 5.9 MediumSeptember 30, 2026
• accellion kiteworks, kiteworks core +1 more Kiteworks Core Improper Validation of Specified Quantity in Input CVE-2026-102111 4.9 MediumSeptember 30, 2026
• accellion kiteworks, kiteworks core +1 more Kiteworks Core Local Privilege Escalation CVE-2026-102112 7.8 HighSeptember 30, 2026
• accellion kiteworks, kiteworks core +1 more Kiteworks Core Local Privilege Escalation CVE-2026-102113 7.8 HighSeptember 30, 2026
• accellion kiteworks, kiteworks core +1 more Kiteworks Core OS Command Injection CVE-2026-102114 7.2 HighSeptember 30, 2026
• accellion kiteworks, kiteworks core +1 more Kiteworks Core Authentication Bypass in the Password Reset Workflow CVE-2026-102115 9.8 CriticalSeptember 30, 2026
• accellion kiteworks, kiteworks email protection gateway +1 more Kiteworks Email Protection Gateway Path Traversal CVE-2026-102116 7.2 HighSeptember 30, 2026
• accellion kiteworks, kiteworks core +1 more Kiteworks Core Remote Code Execution CVE-2026-102117 7.2 HighSeptember 30, 2026
• accellion kiteworks, kiteworks core +1 more Kiteworks Core before version 9.5.0 is vulnerable to Local Privilege Escalation CVE-2026-102118 7.8 HighSeptember 30, 2026
• accellion kiteworks, kiteworks email protection gateway +1 more Kiteworks Email Protection Gateway Path Traversal CVE-2026-102119 7.2 HighSeptember 30, 2026
• accellion kiteworks, kiteworks core +1 more Kiteworks Core OS Command Injection CVE-2026-102120 8.8 HighSeptember 30, 2026
• accellion kiteworks, kiteworks secure data forms +1 more Kiteworks Secure Data Forms Exposure of Sensitive Information to an Unauthorized Actor CVE-2026-102121 8.6 HighSeptember 30, 2026
• accellion kiteworks, kiteworks email protection gateway +1 more Kiteworks Email Protection Gateway server-side request forgery CVE-2026-102104 9.1 CriticalSeptember 30, 2026
• accellion kiteworks, kiteworks core +1 more Kiteworks Core Incorrect Authorization CVE-2026-102122 4.3 MediumSeptember 30, 2026
• accellion kiteworks, kiteworks core +1 more Kiteworks Core Path Traversal CVE-2026-102123 7.4 HighSeptember 30, 2026
• accellion kiteworks, kiteworks email protection gateway +1 more Kiteworks Email Protection Gateway server-side request forgery CVE-2026-102103 9.1 CriticalSeptember 30, 2026
• accellion kiteworks, kiteworks core +1 more Kiteworks Core Missing Authentication for Critical Function CVE-2026-102124 6.5 MediumSeptember 30, 2026
• accellion kiteworks, kiteworks core +1 more Kiteworks Core Sandbox Escape CVE-2026-102125 8.8 HighSeptember 30, 2026
• accellion kiteworks, kiteworks core +1 more Kiteworks Core Stored Cross-site Scripting (XSS) CVE-2026-102126 8.1 HighSeptember 30, 2026
• accellion kiteworks, kiteworks email protection gateway +1 more Kiteworks Email Protection Gateway Improper Restriction of XML External Entity Reference CVE-2026-102127 7.0 HighSeptember 30, 2026
• accellion kiteworks, kiteworks email protection gateway +1 more Kiteworks Email Protection Gateway Improper Authentication CVE-2026-102128 7.5 HighSeptember 30, 2026
• accellion kiteworks, kiteworks core +1 more Kiteworks Core Incorrect Privilege Assignment CVE-2026-102129 7.2 HighSeptember 30, 2026
• accellion kiteworks, kiteworks email protection gateway +1 more Kiteworks Email Protection Gateway Remote Code Execution CVE-2026-102130 7.2 HighSeptember 30, 2026
• accellion kiteworks, kiteworks email protection gateway +1 more Kiteworks Email Protection Gateway Improper Handling of Case Sensitivity CVE-2026-102131 7.2 HighSeptember 30, 2026
• accellion kiteworks, kiteworks core +1 more Kiteworks Core Privilege Escalation through Improper Access Control CVE-2026-102132 7.2 HighSeptember 30, 2026
• accellion kiteworks, kiteworks core +1 more Kiteworks Core Arbitrary File Write through Command Injection CVE-2026-102133 6.6 MediumSeptember 30, 2026
• accellion kiteworks, kiteworks email protection gateway +1 more Kiteworks Email Protection Gateway server-side request forgery CVE-2026-102102 9.1 CriticalSeptember 30, 2026
• accellion kiteworks, kiteworks core +1 more Kiteworks Core Unprotected Alternate Channel CVE-2026-102134 5.4 MediumSeptember 30, 2026
• accellion kiteworks, kiteworks email protection gateway +1 more Kiteworks Email Protection Gateway Deserialization of Untrusted Data CVE-2026-102135 6.6 MediumSeptember 30, 2026
• accellion kiteworks, kiteworks core +1 more Kiteworks Core Command Execution through Configuration Injection CVE-2026-102136 6.3 MediumSeptember 30, 2026
• accellion kiteworks, kiteworks core +1 more Kiteworks Core Unrestricted Upload of File with Dangerous Type CVE-2026-102137 4.1 MediumSeptember 30, 2026
• accellion kiteworks, kiteworks core +1 more Kiteworks Core Server-Side Request Forgery (SSRF) CVE-2026-102138 3.3 LowSeptember 30, 2026
• accellion kiteworks, kiteworks core +1 more Kiteworks Core deserialization of untrusted data CVE-2026-102101 8.1 HighSeptember 30, 2026
• accellion kiteworks, kiteworks email protection gateway +1 more Kiteworks Email Protection Gateway Incorrect Authorization CVE-2026-102139 6.5 MediumSeptember 30, 2026
• accellion kiteworks, kiteworks core +1 more Kiteworks Core Insufficient Verification of Data Authenticity CVE-2026-102140 4.9 MediumSeptember 30, 2026
• accellion kiteworks, kiteworks core +1 more Kiteworks Core Privilege Escalation through External Control of File Name or Path CVE-2026-102141 6.7 MediumSeptember 30, 2026
• accellion kiteworks, kiteworks core +1 more Kiteworks Core Remote Code Execution through Server-Side Template Injection CVE-2026-102142 7.2 HighSeptember 30, 2026
• accellion kiteworks, kiteworks email protection gateway +1 more Kiteworks Email Protection Gateway Unrestricted Upload of File with Dangerous Type CVE-2026-102143 7.5 HighSeptember 30, 2026
• accellion kiteworks, kiteworks core +1 more Kiteworks Core stored XSS CVE-2026-102100 8.7 HighSeptember 30, 2026
• accellion kiteworks, kiteworks email protection gateway +1 more Kiteworks Email Protection Gateway Uncontrolled Resource Consumption CVE-2026-102144 5.3 MediumSeptember 30, 2026
• accellion kiteworks, kiteworks secure data forms +1 more Kiteworks Secure Data Forms Missing Authentication for Critical Function CVE-2026-102150 7.2 HighSeptember 30, 2026
• accellion kiteworks, kiteworks email protection gateway +1 more Kiteworks Email Protection Gateway Improper Access Control CVE-2026-102149 9.4 CriticalSeptember 30, 2026
• accellion kiteworks, kiteworks core +1 more Kiteworks Core Administrative Account Takeover through Stored Cross-site Scripting (XSS) CVE-2026-102147 9.3 CriticalSeptember 30, 2026
• accellion kiteworks, kiteworks email protection gateway +1 more Kiteworks Email Protection Gateway Arbitrary File Write through Server-Side Template Injection CVE-2026-102146 6.5 MediumSeptember 30, 2026
• accellion kiteworks, kiteworks core +1 more Kiteworks Core Server-Side Request Forgery through CRLF Injection CVE-2026-102145 6.6 MediumSeptember 30, 2026
• Show olderLoading…