Skip to contentKiteworks vulnerabilities
Newest
- accellion kiteworks, kiteworks email protection gateway +1 moreKiteworks Email Protection Gateway remote code executionCVE-2026-1020977.2 High
- accellion kiteworks, kiteworks core +1 moreKiteworks Core OS command injectionCVE-2026-1020967.2 High
- accellion kiteworks, kiteworks core +1 moreKiteworks Core arbitrary file writeCVE-2026-1020997.2 High
- accellion kiteworks, kiteworks email protection gateway +1 moreKiteworks Email Protection Gateway server-side request forgeryCVE-2026-1020959.1 Critical
- accellion kiteworks, kiteworks email protection gateway +1 moreKiteworks Email Protection Gateway unsafe reflectionCVE-2026-1020947.2 High
- accellion kiteworks, kiteworks core +1 moreKiteworks Core improper privilege managementCVE-2026-1020937.2 High
- accellion kiteworks, kiteworks core +1 moreKiteworks Core stored XSSCVE-2026-1020928.7 High
- accellion kiteworks, kiteworks secure data forms +1 moreKiteworks Secure Data Forms server-side request forgeryCVE-2026-1020917.5 High
- accellion kiteworks, kiteworks core +1 moreKiteworks Core content injectionCVE-2026-1020904.3 Medium
- accellion kiteworks, kiteworks core +1 moreKiteworks Core SQL InjectionCVE-2026-1020987.2 High
- accellion kiteworks, kiteworks email protection gateway +1 moreKiteworks Email Protection Gateway path traversalCVE-2026-1020897.2 High
- kiteworks security-advisoriesSteeltoe.Discovery.Eureka: malformed enum/bool/timestamp field aborts entire registry fetch (DoS)CVE-2026-81515Fix available7.5 High
- kiteworks security-advisoriesSteeltoe.Discovery.Consul: malformed 'secure' metadata aborts service instance lookup (DoS)CVE-2026-81516Fix available7.5 High
- kiteworks security-advisoriesSteeltoe: Header-forwarded client cert lacks proof of private-key possessionCVE-2026-81868Fix available6.5 Medium
- kiteworks security-advisoriesSteeltoe.Management.Endpoint: HttpExchanges URI masking leaks query-string secretsCVE-2026-75523Fix available5.9 Medium
- accellion kiteworks, kiteworks secure data forms +1 moreKiteworks Secure Data Forms has a SQL Injection vulnerabilityCVE-2026-247827.6 High
- accellion kiteworks, kiteworks secure data forms +1 moreKiteworks Secure Data Forms is vulnerable to Authorization Bypass Through User-Controlled KeyCVE-2026-247613.7 Low
- accellion kiteworks, kiteworks secure data forms +1 moreKiteworks Secure Data Forms is vulnerable to Authorization Bypass Through User-Controlled KeyCVE-2026-247564.3 Medium
- accellion kiteworks, kiteworks secure data forms +1 moreKiteworks Secure Data Forms is vulnerable to Authorization Bypass Through User-Controlled KeyCVE-2026-247555.4 Medium
- accellion kiteworks, kiteworks security-advisories +1 moreKiteworks Secure Data Forms Vulnerable to Cross-site ScriptingCVE-2026-247545.4 Medium
- accellion kiteworks, kiteworks secure data forms +1 moreKiteworks Secure Data Forms is vulnerable to Authorization Bypass Through User-Controlled KeyCVE-2026-247536.5 Medium
- accellion kiteworks, kiteworks secure data forms +1 moreKiteworks Secure Data Forms Vulnerable to Cross-site ScriptingCVE-2026-247528.2 High
- accellion kiteworks, kiteworks secure data forms +1 moreKiteworks Secure Data Forms Vulnerable to Cross-site ScriptingCVE-2026-247518.2 High
- accellion kiteworks, kiteworks secure data forms +1 moreKiteworks Secure Data Forms is vulnerable to Authorization Bypass Through User-Controlled KeyCVE-2026-236386.5 Medium
- nextcloud server, kiteworks security-advisories +1 moreNextcloud: Propfind requests for file comments allowed to load comments for other filesCVE-2026-45810Fix available6.8 Medium
- nextcloud tables, kiteworks security-advisories +1 moreNextcloud: Tables app allows limited SQLi in ORDER BY with malicious sort order argument for Table ViewsCVE-2026-457227.1 High
- nextcloud server, kiteworks security-advisories +1 moreNextcloud: Bypass of second factor authentication on DAV endpointsCVE-2026-45691Fix available5.9 Medium
- nextcloud server, kiteworks security-advisories +1 moreNextcloud: Two-Factor Authentication Bypass via Pending Session Token ReplayCVE-2026-45690Fix available5.9 Medium
- nextcloud tables, kiteworks security-advisories +1 moreNextcloud: SQL Injection in Column Type Parameter Allows Arbitrary SQL ExecutionCVE-2026-455458.2 High
- nextcloud tables, kiteworks security-advisories +1 moreNextcloud: Information Disclosure of view filter metdata via Broken Sensitive Data Masking in ViewServiceCVE-2026-455444.3 Medium
- nextcloud forms, kiteworks security-advisories +1 moreNextcloud: Deleting a Forms collaborator share leaves uploaded response files accessible through a lingering Files shareCVE-2026-455435.3 Medium
- nextcloud calendar, kiteworks security-advisories +1 moreNextcloud: Calendar app leaked user identifiers via attendee suggestion endpointCVE-2026-452864.3 Medium
- nextcloud user oidc, kiteworks security-advisories +1 moreNextcloud: Wrong condition in the User OIDC app's LdapService allowed deleted LDAP users to authenticateCVE-2026-452844.6 Medium
- kiteworks security-advisories, nextcloud server +1 moreNextcloud: Hidden Public Link creation when sharing to a Team External MemberCVE-2026-452856.4 Medium
- nextcloud server, kiteworks security-advisories +1 moreNextcloud: Files Lock app allows users to lock and unlock files of other usersCVE-2026-452836.3 Medium
- nextcloud server, kiteworks security-advisories +1 moreNextcloud: Logged-in user bypasses share password and download restrictions on Text attachments via documentId leads to unauthorized file accessCVE-2026-452826.5 Medium
- nextcloud server, kiteworks security-advisories +1 moreNextcloud: Cross-Account Calendar Takeover via Unauthorized Group-Member-Set UpdateCVE-2026-45281Fix available8.1 High
- nextcloud server, kiteworks security-advisories +1 moreNextcloud: Limited path traversal via template API if using `{lang}` in configCVE-2026-452794.4 Medium
- nextcloud user oidc, kiteworks security-advisories +1 moreNextcloud: Open Redirect in user_oidc login flow via protocol-relative URL bypassCVE-2026-452783.3 Low
- nextcloud approval, kiteworks security-advisories +1 moreNextcloud: Information disclosure in Nextcloud Approval app via fileId parameter reveals workflow associationsCVE-2026-452773.3 Low
- nextcloud approval, kiteworks security-advisories +1 moreNextcloud: Authorization bypass in approval feature allows unauthorized file sharing with approversCVE-2026-452756.5 Medium
- kiteworks security-advisoriesNextcloud: Missing permission check for from submissionsCVE-2026-452676.5 Medium
- kiteworks security-advisoriesNextcloud: Unauthorized force-mute from missing permission check when using internal signalingCVE-2026-452663.5 Low
- kiteworks security-advisoriesNextcloud: Files drop share links for end-to-end encrypted folders allowed to drop files into other folders of the share ownerCVE-2026-451593.5 Low
- kiteworks security-advisoriesNextcloud: Valid share tokens allow to access tempory upload files of share ownerCVE-2026-45157Fix available6.3 Medium
- kiteworks security-advisoriesNextcloud: Authentication Bypass in ID4me handling via Missing JWT Signature Verification in User OIDCCVE-2026-45156Public exploit8.1 High
- kiteworks security-advisoriesNextcloud: Private circle can be added to another circle via APICVE-2026-451552.6 Low
- kiteworks security-advisoriesNextcloud: Improper Access Control in CollectivesCVE-2026-451542.6 Low
- kiteworks security-advisoriesNextcloud: PIN bypass in PassCodeActivity via back buttonCVE-2026-45153Fix available4.6 Medium
- kiteworks security-advisoriesNextcloud: ACL Rename Permission Bypass in Team Folders Allows Unauthorized File RenamesCVE-2026-452644.3 Medium
- Show moreLoading…