Vendor

    Kiteworks

    126 known vulnerabilities in products by Kiteworks, 4 of them actively exploited (CISA KEV).

    Key figures

    126

    Vulnerabilities

    4

    Actively exploited (KEV)

    4

    Used by ransomware

    23

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Kiteworks
    CriticalCVE-2021-27104

    Accellion FTA OS Command Injection Vulnerability

    In CISA KEVRansomware

    9.8
    CriticalCVE-2021-27103

    Accellion FTA Server-Side Request Forgery (SSRF) Vulnerability

    In CISA KEVRansomware

    9.8
    CriticalCVE-2021-27101

    Accellion FTA SQL Injection Vulnerability

    In CISA KEVRansomware

    9.8
    CriticalCVE-2021-27102

    Accellion FTA OS Command Injection Vulnerability

    In CISA KEVRansomware

    7.8
    HighCVE-2026-102096

    Kiteworks Core OS command injection

    also in 2 other products

    7.2
    CriticalCVE-2015-2857

    Accellion File Transfer Appliance: Code Execution

    9.8
    HighCVE-2026-102114

    Kiteworks Core OS Command Injection

    also in 2 other products

    7.2
    CriticalCVE-2017-8303

    Accellion File Transfer Appliance: Remote Code Execution

    9.8
    HighCVE-2021-31586

    Kiteworks Core: SQL Injection

    8.8
    HighCVE-2026-102097

    Kiteworks Email Protection Gateway remote code execution

    also in 2 other products

    7.2
    HighCVE-2026-102099

    Kiteworks Core arbitrary file write

    also in 2 other products

    7.2
    HighCVE-2026-102116

    Kiteworks Email Protection Gateway Path Traversal

    also in 2 other products

    7.2
    HighCVE-2015-2856

    Accellion File Transfer Appliance: Path Traversal

    7.5
    HighCVE-2016-2352

    Accellion File Transfer Appliance: security vulnerability

    8.8
    CriticalCVE-2026-102115

    Kiteworks Core Authentication Bypass in the Password Reset Workflow

    also in 2 other products

    9.8
    HighCVE-2026-102089

    Kiteworks Email Protection Gateway path traversal

    also in 2 other products

    7.2
    HighCVE-2026-102108

    Kiteworks Email Protection Gateway deserialization of untrusted data

    also in 2 other products

    7.2
    HighCVE-2026-102094

    Kiteworks Email Protection Gateway unsafe reflection

    also in 2 other products

    7.2
    CriticalCVE-2026-102106

    Kiteworks Email Protection Gateway improper authentication

    also in 2 other products

    9.1
    HighCVE-2026-102119

    Kiteworks Email Protection Gateway Path Traversal

    also in 2 other products

    7.2
    HighCVE-2026-102117

    Kiteworks Core Remote Code Execution

    also in 2 other products

    7.2
    HighCVE-2026-102142

    Kiteworks Core Remote Code Execution through Server-Side Template Injection

    also in 2 other products

    7.2
    HighCVE-2026-102130

    Kiteworks Email Protection Gateway Remote Code Execution

    also in 2 other products

    7.2
    HighCVE-2026-102131

    Kiteworks Email Protection Gateway Improper Handling of Case Sensitivity

    also in 2 other products

    7.2
    MediumCVE-2026-102135

    Kiteworks Email Protection Gateway Deserialization of Untrusted Data

    also in 2 other products

    6.6

    All vulnerabilities in search

    Products