Skip to contentAccellion Kiteworks vulnerabilities
- accellion kiteworks, kiteworks email protection gateway +1 moreKiteworks Email Protection Gateway remote code executionCVE-2026-1020977.2 High
- accellion kiteworks, kiteworks core +1 moreKiteworks Core OS command injectionCVE-2026-1020967.2 High
- accellion kiteworks, kiteworks core +1 moreKiteworks Core arbitrary file writeCVE-2026-1020997.2 High
- accellion kiteworks, kiteworks email protection gateway +1 moreKiteworks Email Protection Gateway server-side request forgeryCVE-2026-1020959.1 Critical
- accellion kiteworks, kiteworks email protection gateway +1 moreKiteworks Email Protection Gateway unsafe reflectionCVE-2026-1020947.2 High
- accellion kiteworks, kiteworks core +1 moreKiteworks Core improper privilege managementCVE-2026-1020937.2 High
- accellion kiteworks, kiteworks core +1 moreKiteworks Core stored XSSCVE-2026-1020928.7 High
- accellion kiteworks, kiteworks secure data forms +1 moreKiteworks Secure Data Forms server-side request forgeryCVE-2026-1020917.5 High
- accellion kiteworks, kiteworks core +1 moreKiteworks Core content injectionCVE-2026-1020904.3 Medium
- accellion kiteworks, kiteworks core +1 moreKiteworks Core SQL InjectionCVE-2026-1020987.2 High
- accellion kiteworks, kiteworks email protection gateway +1 moreKiteworks Email Protection Gateway path traversalCVE-2026-1020897.2 High
- accellion kiteworks, kiteworks secure data forms +1 moreKiteworks Secure Data Forms has a SQL Injection vulnerabilityCVE-2026-247827.6 High
- accellion kiteworks, kiteworks secure data forms +1 moreKiteworks Secure Data Forms is vulnerable to Authorization Bypass Through User-Controlled KeyCVE-2026-247613.7 Low
- accellion kiteworks, kiteworks secure data forms +1 moreKiteworks Secure Data Forms is vulnerable to Authorization Bypass Through User-Controlled KeyCVE-2026-247564.3 Medium
- accellion kiteworks, kiteworks secure data forms +1 moreKiteworks Secure Data Forms is vulnerable to Authorization Bypass Through User-Controlled KeyCVE-2026-247555.4 Medium
- accellion kiteworks, kiteworks security-advisories +1 moreKiteworks Secure Data Forms Vulnerable to Cross-site ScriptingCVE-2026-247545.4 Medium
- accellion kiteworks, kiteworks secure data forms +1 moreKiteworks Secure Data Forms is vulnerable to Authorization Bypass Through User-Controlled KeyCVE-2026-247536.5 Medium
- accellion kiteworks, kiteworks secure data forms +1 moreKiteworks Secure Data Forms Vulnerable to Cross-site ScriptingCVE-2026-247528.2 High
- accellion kiteworks, kiteworks secure data forms +1 moreKiteworks Secure Data Forms Vulnerable to Cross-site ScriptingCVE-2026-247518.2 High
- accellion kiteworks, kiteworks secure data forms +1 moreKiteworks Secure Data Forms is vulnerable to Authorization Bypass Through User-Controlled KeyCVE-2026-236386.5 Medium
- accellion kiteworks, kiteworks email protection gateway +1 moreKiteworks Email Protection Gateway has an Insufficient Session ExpirationCVE-2026-290924.9 Medium
- accellion kiteworks, kiteworks secure data forms +1 moreKiteworks Secure Data Forms is vulnerable to an Unrestricted Upload of File with Dangerous TypeCVE-2026-236365.5 Medium
- accellion kiteworks, kiteworks secure data forms +1 moreKiteworks Secure Data Forms has a potential Unprotected Transport of CredentialsCVE-2026-236356.5 Medium
- accellion kiteworks, kiteworks secure data forms +1 moreKiteworks Secure Data Forms vulnerable to Cross-site ScriptingCVE-2026-247507.6 High
- accellion kiteworks, kiteworks core +1 moreKiteworks Core before 9.2.2 is vulnerable to Improper Ownership ManagementCVE-2026-235148.8 High
- accellion kiteworks, kiteworks security-advisories +1 moreKiteworks Email Protection Gateway has a Cross-site Scripting vulnerabilityCVE-2026-282728.1 High
- accellion kiteworks, kiteworks security-advisories +1 moreKiteworks Core is vulnerable to Server-Side Request Forgery (SSRF)CVE-2026-282716.5 Medium
- accellion kiteworks, kiteworks security-advisories +1 moreKiteworks Core has an Unrestricted Upload of File with Dangerous TypeCVE-2026-282704.9 Medium
- accellion kiteworks, kiteworks security-advisories +1 moreKiteworks Core has an OS Command InjectionCVE-2026-282695.9 Medium
- accellion kiteworks, kiteworks security-advisories +1 moreKiteworks Core is vulnerable to Improper Input ValidationCVE-2025-539396.3 Medium
- accellion kiteworks managed file transfer, kiteworks security-advisories +1 moreKiteworks MFT has a Privilege Defined With Unsafe ActionsCVE-2025-539006.5 Medium
- accellion kiteworks managed file transfer, kiteworks security-advisories +1 moreKiteworks MFT is vulnerable to an Incorrectly Specified Destination in a Communication ChannelCVE-2025-538997.2 High
- accellion kiteworks managed file transfer, kiteworks security-advisories +1 moreKiteworks MFT has a Cross-Site Request Forgery (CSRF) vulnerabilityCVE-2025-538976.8 Medium
- accellion kiteworks managed file transfer, kiteworks security-advisories +1 moreKiteworks MFT is vulnerable to Insufficient Session ExpirationCVE-2025-538967.1 High
- accellion kiteworksAccellion Kiteworks before 7.4.0 allows an authenticated user to perform SQL Injection via...CVE-2021-31586EPSS 44.1%8.8 High
- accellion kiteworksAccellion Kiteworks before 7.3.1 allows a user with Admin privileges to escalate their privileges...CVE-2021-315856.7 Medium
- accellion kiteworksAuthentication Bypass vulnerability in Accellion kiteworks before 2017.01.00 allows remote...CVE-2017-94216.5 Medium
- accellion kiteworks applianceDirectory traversal vulnerability on Accellion Kiteworks appliances before kw2016.03.00 allows...CVE-2016-56644.3 Medium
- accellion kiteworks applianceMultiple cross-site scripting (XSS) vulnerabilities in oauth_callback.php on Accellion Kiteworks...CVE-2016-56636.1 Medium
- accellion kiteworks applianceAccellion Kiteworks appliances before kw2016.03.00 use setuid-root permissions for /opt/bin/cli,...CVE-2016-56627.8 High