Log in Start free

Kiteworks

Products

ProductCVEsExploitedLatest
Core36–Sep 30, 2026
Email Protection Gateway22–Sep 30, 2026
Secure Data Forms15–Sep 30, 2026
security-advisories10–Jun 1, 2026
Kiteworks Email Protection Gateway1–Mar 25, 2026
OwnCloud1–Oct 1, 2024

Exploited and recent CVEs

  • CVE-2026-102105 Critical 9.1 Kiteworks Email Protection Gateway server-side request forgery 0.5%
  • CVE-2026-102106 Critical 9.1 Kiteworks Email Protection Gateway improper authentication 1.1%
  • CVE-2026-102107 Medium 4.6 Kiteworks Core user impersonation in a file-request feature 0.2%
  • CVE-2026-102108 High 7.2 Kiteworks Email Protection Gateway deserialization of untrusted data 1.5%
  • CVE-2026-102109 High 7.1 Kiteworks Secure Data Forms SQL injection 0.4%
  • CVE-2026-102110 Medium 5.9 Missing authentication on a Kiteworks appliance setup function 0.2%
  • CVE-2026-102111 Medium 4.9 Kiteworks Core Improper Validation of Specified Quantity in Input 0.2%
  • CVE-2026-102112 High 7.8 Kiteworks Core Local Privilege Escalation 0.4%
  • CVE-2026-102113 High 7.8 Kiteworks Core Local Privilege Escalation 0.4%
  • CVE-2026-102114 High 7.2 Kiteworks Core OS Command Injection 3.1%
  • CVE-2026-102115 Critical 9.8 Kiteworks Core Authentication Bypass in the Password Reset Workflow 1.0%
  • CVE-2026-102116 High 7.2 Kiteworks Email Protection Gateway Path Traversal 2.0%
  • CVE-2026-102117 High 7.2 Kiteworks Core Remote Code Execution 1.3%
  • CVE-2026-102118 High 7.8 Kiteworks Core before version 9.5.0 is vulnerable to Local Privilege Escalation 0.4%
  • CVE-2026-102119 High 7.2 Kiteworks Email Protection Gateway Path Traversal 1.4%
  • CVE-2026-102120 High 8.8 Kiteworks Core OS Command Injection 0.4%
  • CVE-2026-102121 High 8.6 Kiteworks Secure Data Forms Exposure of Sensitive Information to an Unauthorized Actor 0.5%
  • CVE-2026-102104 Critical 9.1 Kiteworks Email Protection Gateway server-side request forgery 0.7%
  • CVE-2026-102122 Medium 4.3 Kiteworks Core Incorrect Authorization 0.2%
  • CVE-2026-102123 High 7.4 Kiteworks Core Path Traversal 1.0%
  • CVE-2026-102103 Critical 9.1 Kiteworks Email Protection Gateway server-side request forgery 0.7%
  • CVE-2026-102124 Medium 6.5 Kiteworks Core Missing Authentication for Critical Function 0.2%
  • CVE-2026-102125 High 8.8 Kiteworks Core Sandbox Escape 0.4%
  • CVE-2026-102126 High 8.1 Kiteworks Core Stored Cross-site Scripting (XSS) 0.3%
  • CVE-2026-102127 High 7.0 Kiteworks Email Protection Gateway Improper Restriction of XML External Entity Reference 0.2%
  • CVE-2026-102128 High 7.5 Kiteworks Email Protection Gateway Improper Authentication 0.2%
  • CVE-2026-102129 High 7.2 Kiteworks Core Incorrect Privilege Assignment 0.8%
  • CVE-2026-102130 High 7.2 Kiteworks Email Protection Gateway Remote Code Execution 1.2%
  • CVE-2026-102131 High 7.2 Kiteworks Email Protection Gateway Improper Handling of Case Sensitivity 1.2%
  • CVE-2026-102132 High 7.2 Kiteworks Core Privilege Escalation through Improper Access Control 1.0%