Skip to contentAccellion vulnerabilities
Newest
- accellion kiteworks, kiteworks email protection gateway +1 moreKiteworks Email Protection Gateway remote code executionCVE-2026-1020977.2 High
- accellion kiteworks, kiteworks core +1 moreKiteworks Core OS command injectionCVE-2026-1020967.2 High
- accellion kiteworks, kiteworks core +1 moreKiteworks Core arbitrary file writeCVE-2026-1020997.2 High
- accellion kiteworks, kiteworks email protection gateway +1 moreKiteworks Email Protection Gateway server-side request forgeryCVE-2026-1020959.1 Critical
- accellion kiteworks, kiteworks email protection gateway +1 moreKiteworks Email Protection Gateway unsafe reflectionCVE-2026-1020947.2 High
- accellion kiteworks, kiteworks core +1 moreKiteworks Core improper privilege managementCVE-2026-1020937.2 High
- accellion kiteworks, kiteworks core +1 moreKiteworks Core stored XSSCVE-2026-1020928.7 High
- accellion kiteworks, kiteworks secure data forms +1 moreKiteworks Secure Data Forms server-side request forgeryCVE-2026-1020917.5 High
- accellion kiteworks, kiteworks core +1 moreKiteworks Core content injectionCVE-2026-1020904.3 Medium
- accellion kiteworks, kiteworks core +1 moreKiteworks Core SQL InjectionCVE-2026-1020987.2 High
- accellion kiteworks, kiteworks email protection gateway +1 moreKiteworks Email Protection Gateway path traversalCVE-2026-1020897.2 High
- accellion kiteworks, kiteworks secure data forms +1 moreKiteworks Secure Data Forms has a SQL Injection vulnerabilityCVE-2026-247827.6 High
- accellion kiteworks, kiteworks secure data forms +1 moreKiteworks Secure Data Forms is vulnerable to Authorization Bypass Through User-Controlled KeyCVE-2026-247613.7 Low
- accellion kiteworks, kiteworks secure data forms +1 moreKiteworks Secure Data Forms is vulnerable to Authorization Bypass Through User-Controlled KeyCVE-2026-247564.3 Medium
- accellion kiteworks, kiteworks secure data forms +1 moreKiteworks Secure Data Forms is vulnerable to Authorization Bypass Through User-Controlled KeyCVE-2026-247555.4 Medium
- accellion kiteworks, kiteworks security-advisories +1 moreKiteworks Secure Data Forms Vulnerable to Cross-site ScriptingCVE-2026-247545.4 Medium
- accellion kiteworks, kiteworks secure data forms +1 moreKiteworks Secure Data Forms is vulnerable to Authorization Bypass Through User-Controlled KeyCVE-2026-247536.5 Medium
- accellion kiteworks, kiteworks secure data forms +1 moreKiteworks Secure Data Forms Vulnerable to Cross-site ScriptingCVE-2026-247528.2 High
- accellion kiteworks, kiteworks secure data forms +1 moreKiteworks Secure Data Forms Vulnerable to Cross-site ScriptingCVE-2026-247518.2 High
- accellion kiteworks, kiteworks secure data forms +1 moreKiteworks Secure Data Forms is vulnerable to Authorization Bypass Through User-Controlled KeyCVE-2026-236386.5 Medium
- accellion kiteworks, kiteworks email protection gateway +1 moreKiteworks Email Protection Gateway has an Insufficient Session ExpirationCVE-2026-290924.9 Medium
- accellion kiteworks, kiteworks secure data forms +1 moreKiteworks Secure Data Forms is vulnerable to an Unrestricted Upload of File with Dangerous TypeCVE-2026-236365.5 Medium
- accellion kiteworks, kiteworks secure data forms +1 moreKiteworks Secure Data Forms has a potential Unprotected Transport of CredentialsCVE-2026-236356.5 Medium
- accellion kiteworks, kiteworks secure data forms +1 moreKiteworks Secure Data Forms vulnerable to Cross-site ScriptingCVE-2026-247507.6 High
- accellion kiteworks, kiteworks core +1 moreKiteworks Core before 9.2.2 is vulnerable to Improper Ownership ManagementCVE-2026-235148.8 High
- accellion kiteworks, kiteworks security-advisories +1 moreKiteworks Email Protection Gateway has a Cross-site Scripting vulnerabilityCVE-2026-282728.1 High
- accellion kiteworks, kiteworks security-advisories +1 moreKiteworks Core is vulnerable to Server-Side Request Forgery (SSRF)CVE-2026-282716.5 Medium
- accellion kiteworks, kiteworks security-advisories +1 moreKiteworks Core has an Unrestricted Upload of File with Dangerous TypeCVE-2026-282704.9 Medium
- accellion kiteworks, kiteworks security-advisories +1 moreKiteworks Core has an OS Command InjectionCVE-2026-282695.9 Medium
- accellion kiteworks, kiteworks security-advisories +1 moreKiteworks Core is vulnerable to Improper Input ValidationCVE-2025-539396.3 Medium
- accellion kiteworks managed file transfer, kiteworks security-advisories +1 moreKiteworks MFT has a Privilege Defined With Unsafe ActionsCVE-2025-539006.5 Medium
- accellion kiteworks managed file transfer, kiteworks security-advisories +1 moreKiteworks MFT is vulnerable to an Incorrectly Specified Destination in a Communication ChannelCVE-2025-538997.2 High
- accellion kiteworks managed file transfer, kiteworks security-advisories +1 moreKiteworks MFT has a Cross-Site Request Forgery (CSRF) vulnerabilityCVE-2025-538976.8 Medium
- accellion kiteworks managed file transfer, kiteworks security-advisories +1 moreKiteworks MFT is vulnerable to Insufficient Session ExpirationCVE-2025-538967.1 High
- accellion managed file transferKiteworks MFT 7.5 may allow an unauthorized user to reset other users' passwords. This is fixed...CVE-2022-241106.5 Medium
- accellion kiteworksAccellion Kiteworks before 7.4.0 allows an authenticated user to perform SQL Injection via...CVE-2021-31586EPSS 44.1%8.8 High
- accellion kiteworksAccellion Kiteworks before 7.3.1 allows a user with Admin privileges to escalate their privileges...CVE-2021-315856.7 Medium
- accellion ftaAccellion FTA 9_12_432 and earlier is affected by argument injection via a crafted POST request...CVE-2021-277309.8 Critical
- accellion ftaAccellion FTA 9_12_432 and earlier is affected by stored XSS via a crafted POST request to a user...CVE-2021-277316.1 Medium
- accellion ftaAccellion FTA 9_12_370 and earlier is affected by OS command execution via a crafted POST request...CVE-2021-27104In KEVEPSS 46.2%9.8 Critical
- accellion ftaAccellion FTA 9_12_411 and earlier is affected by SSRF via a crafted POST request to...CVE-2021-27103In KEV9.8 Critical
- accellion ftaAccellion FTA 9_12_411 and earlier is affected by OS command execution via a local web service...CVE-2021-27102In KEV7.8 High
- accellion ftaAccellion FTA 9_12_370 and earlier is affected by SQL injection via a crafted Host header in a...CVE-2021-27101In KEVPublic exploit9.8 Critical
- accellion file transfer applianceAccellion File Transfer Appliance Improper Neutralization of Special Elements used in a Command ('Command Injection')CVE-2019-56239.8 Critical
- accellion file transfer applianceAccellion File Transfer Appliance Use of Hard-coded CredentialsCVE-2019-56229.8 Critical
- accellion ftp serverThe Accellion FTP server prior to version FTA_9_12_220 is vulnerable to informaiton exposureCVE-2016-95006.1 Medium
- accellion ftp serverThe Accellion FTP server prior to version FTA_9_12_220 is vulnerable to cross-site scripting.CVE-2016-94995.3 Medium
- accellion kiteworksAuthentication Bypass vulnerability in Accellion kiteworks before 2017.01.00 allows remote...CVE-2017-94216.5 Medium
- accellion file transfer applianceDirectory traversal vulnerability in the template function in function.inc in Accellion File...CVE-2015-2856EPSS 56.6%7.5 High
- accellion file transfer applianceAccellion File Transfer Appliance before FTA_9_11_210 allows remote attackers to execute...CVE-2015-2857Public exploitEPSS 84.2%9.8 Critical
- Show moreLoading…