Kiteworks Core

• CVE-2026-102107 Medium 4.6 Kiteworks Core user impersonation in a file-request feature 0.2%
• CVE-2026-102110 Medium 5.9 Missing authentication on a Kiteworks appliance setup function 0.2%
• CVE-2026-102111 Medium 4.9 Kiteworks Core Improper Validation of Specified Quantity in Input 0.2%
• CVE-2026-102112 High 7.8 Kiteworks Core Local Privilege Escalation 0.4%
• CVE-2026-102113 High 7.8 Kiteworks Core Local Privilege Escalation 0.4%
• CVE-2026-102114 High 7.2 Kiteworks Core OS Command Injection 3.1%
• CVE-2026-102115 Critical 9.8 Kiteworks Core Authentication Bypass in the Password Reset Workflow 1.0%
• CVE-2026-102117 High 7.2 Kiteworks Core Remote Code Execution 1.3%
• CVE-2026-102118 High 7.8 Kiteworks Core before version 9.5.0 is vulnerable to Local Privilege Escalation 0.4%
• CVE-2026-102120 High 8.8 Kiteworks Core OS Command Injection 0.4%
• CVE-2026-102122 Medium 4.3 Kiteworks Core Incorrect Authorization 0.2%
• CVE-2026-102123 High 7.4 Kiteworks Core Path Traversal 1.0%
• CVE-2026-102124 Medium 6.5 Kiteworks Core Missing Authentication for Critical Function 0.2%
• CVE-2026-102125 High 8.8 Kiteworks Core Sandbox Escape 0.4%
• CVE-2026-102126 High 8.1 Kiteworks Core Stored Cross-site Scripting (XSS) 0.3%
• CVE-2026-102129 High 7.2 Kiteworks Core Incorrect Privilege Assignment 0.8%
• CVE-2026-102132 High 7.2 Kiteworks Core Privilege Escalation through Improper Access Control 1.0%
• CVE-2026-102133 Medium 6.6 Kiteworks Core Arbitrary File Write through Command Injection 1.2%
• CVE-2026-102134 Medium 5.4 Kiteworks Core Unprotected Alternate Channel 0.2%
• CVE-2026-102136 Medium 6.3 Kiteworks Core Command Execution through Configuration Injection 0.1%
• CVE-2026-102137 Medium 4.1 Kiteworks Core Unrestricted Upload of File with Dangerous Type 0.3%
• CVE-2026-102138 Low 3.3 Kiteworks Core Server-Side Request Forgery (SSRF) 0.2%
• CVE-2026-102101 High 8.1 Kiteworks Core deserialization of untrusted data 0.9%
• CVE-2026-102140 Medium 4.9 Kiteworks Core Insufficient Verification of Data Authenticity 0.1%
• CVE-2026-102141 Medium 6.7 Kiteworks Core Privilege Escalation through External Control of File Name or Path 0.1%
• CVE-2026-102142 High 7.2 Kiteworks Core Remote Code Execution through Server-Side Template Injection 1.2%
• CVE-2026-102100 High 8.7 Kiteworks Core stored XSS 0.3%
• CVE-2026-102147 Critical 9.3 Kiteworks Core Administrative Account Takeover through Stored Cross-site Scripting (XSS) 0.5%
• CVE-2026-102145 Medium 6.6 Kiteworks Core Server-Side Request Forgery through CRLF Injection 0.3%
• CVE-2026-102096 High 7.2 Kiteworks Core OS command injection 3.3%
• CVE-2026-102099 High 7.2 Kiteworks Core arbitrary file write 2.0%
• CVE-2026-102093 High 7.2 Kiteworks Core improper privilege management 1.0%
• CVE-2026-102092 High 8.7 Kiteworks Core stored XSS 0.3%
• CVE-2026-102090 Medium 4.3 Kiteworks Core content injection 0.2%
• CVE-2026-102098 High 7.2 Kiteworks Core SQL Injection 1.0%
• CVE-2026-23514 High 8.8 Kiteworks Core before 9.2.2 is vulnerable to Improper Ownership Management 1.1%