Kiteworks Core vulnerabilities

• accellion kiteworks, kiteworks core +1 more Kiteworks Core user impersonation in a file-request feature CVE-2026-102107 4.6 MediumSeptember 30, 2026
• accellion kiteworks, kiteworks core +1 more Missing authentication on a Kiteworks appliance setup function CVE-2026-102110 5.9 MediumSeptember 30, 2026
• accellion kiteworks, kiteworks core +1 more Kiteworks Core Improper Validation of Specified Quantity in Input CVE-2026-102111 4.9 MediumSeptember 30, 2026
• accellion kiteworks, kiteworks core +1 more Kiteworks Core Local Privilege Escalation CVE-2026-102112 7.8 HighSeptember 30, 2026
• accellion kiteworks, kiteworks core +1 more Kiteworks Core Local Privilege Escalation CVE-2026-102113 7.8 HighSeptember 30, 2026
• accellion kiteworks, kiteworks core +1 more Kiteworks Core OS Command Injection CVE-2026-102114 7.2 HighSeptember 30, 2026
• accellion kiteworks, kiteworks core +1 more Kiteworks Core Authentication Bypass in the Password Reset Workflow CVE-2026-102115 9.8 CriticalSeptember 30, 2026
• accellion kiteworks, kiteworks core +1 more Kiteworks Core Remote Code Execution CVE-2026-102117 7.2 HighSeptember 30, 2026
• accellion kiteworks, kiteworks core +1 more Kiteworks Core before version 9.5.0 is vulnerable to Local Privilege Escalation CVE-2026-102118 7.8 HighSeptember 30, 2026
• accellion kiteworks, kiteworks core +1 more Kiteworks Core OS Command Injection CVE-2026-102120 8.8 HighSeptember 30, 2026
• accellion kiteworks, kiteworks core +1 more Kiteworks Core Incorrect Authorization CVE-2026-102122 4.3 MediumSeptember 30, 2026
• accellion kiteworks, kiteworks core +1 more Kiteworks Core Path Traversal CVE-2026-102123 7.4 HighSeptember 30, 2026
• accellion kiteworks, kiteworks core +1 more Kiteworks Core Missing Authentication for Critical Function CVE-2026-102124 6.5 MediumSeptember 30, 2026
• accellion kiteworks, kiteworks core +1 more Kiteworks Core Sandbox Escape CVE-2026-102125 8.8 HighSeptember 30, 2026
• accellion kiteworks, kiteworks core +1 more Kiteworks Core Stored Cross-site Scripting (XSS) CVE-2026-102126 8.1 HighSeptember 30, 2026
• accellion kiteworks, kiteworks core +1 more Kiteworks Core Incorrect Privilege Assignment CVE-2026-102129 7.2 HighSeptember 30, 2026
• accellion kiteworks, kiteworks core +1 more Kiteworks Core Privilege Escalation through Improper Access Control CVE-2026-102132 7.2 HighSeptember 30, 2026
• accellion kiteworks, kiteworks core +1 more Kiteworks Core Arbitrary File Write through Command Injection CVE-2026-102133 6.6 MediumSeptember 30, 2026
• accellion kiteworks, kiteworks core +1 more Kiteworks Core Unprotected Alternate Channel CVE-2026-102134 5.4 MediumSeptember 30, 2026
• accellion kiteworks, kiteworks core +1 more Kiteworks Core Command Execution through Configuration Injection CVE-2026-102136 6.3 MediumSeptember 30, 2026
• accellion kiteworks, kiteworks core +1 more Kiteworks Core Unrestricted Upload of File with Dangerous Type CVE-2026-102137 4.1 MediumSeptember 30, 2026
• accellion kiteworks, kiteworks core +1 more Kiteworks Core Server-Side Request Forgery (SSRF) CVE-2026-102138 3.3 LowSeptember 30, 2026
• accellion kiteworks, kiteworks core +1 more Kiteworks Core deserialization of untrusted data CVE-2026-102101 8.1 HighSeptember 30, 2026
• accellion kiteworks, kiteworks core +1 more Kiteworks Core Insufficient Verification of Data Authenticity CVE-2026-102140 4.9 MediumSeptember 30, 2026
• accellion kiteworks, kiteworks core +1 more Kiteworks Core Privilege Escalation through External Control of File Name or Path CVE-2026-102141 6.7 MediumSeptember 30, 2026
• accellion kiteworks, kiteworks core +1 more Kiteworks Core Remote Code Execution through Server-Side Template Injection CVE-2026-102142 7.2 HighSeptember 30, 2026
• accellion kiteworks, kiteworks core +1 more Kiteworks Core stored XSS CVE-2026-102100 8.7 HighSeptember 30, 2026
• accellion kiteworks, kiteworks core +1 more Kiteworks Core Administrative Account Takeover through Stored Cross-site Scripting (XSS) CVE-2026-102147 9.3 CriticalSeptember 30, 2026
• accellion kiteworks, kiteworks core +1 more Kiteworks Core Server-Side Request Forgery through CRLF Injection CVE-2026-102145 6.6 MediumSeptember 30, 2026
• accellion kiteworks, kiteworks core +1 more Kiteworks Core OS command injection CVE-2026-102096 7.2 HighSeptember 30, 2026
• accellion kiteworks, kiteworks core +1 more Kiteworks Core arbitrary file write CVE-2026-102099 7.2 HighSeptember 30, 2026
• accellion kiteworks, kiteworks core +1 more Kiteworks Core improper privilege management CVE-2026-102093 7.2 HighSeptember 30, 2026
• accellion kiteworks, kiteworks core +1 more Kiteworks Core stored XSS CVE-2026-102092 8.7 HighSeptember 30, 2026
• accellion kiteworks, kiteworks core +1 more Kiteworks Core content injection CVE-2026-102090 4.3 MediumSeptember 30, 2026
• accellion kiteworks, kiteworks core +1 more Kiteworks Core SQL Injection CVE-2026-102098 7.2 HighSeptember 30, 2026
• accellion kiteworks, kiteworks core +1 more Kiteworks Core before 9.2.2 is vulnerable to Improper Ownership Management CVE-2026-23514 8.8 HighMarch 25, 2026