Product by Kiteworks
Kiteworks Core
83 known vulnerabilities in Kiteworks Core (Kiteworks), 0 of them actively exploited (CISA KEV).
Key figures
83
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
9
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-102096 | Kiteworks Core OS command injection | 7.2 | |
| High | CVE-2026-102114 | Kiteworks Core OS Command Injection | 7.2 | |
| High | CVE-2021-31586 | Kiteworks Core: SQL Injection | 8.8 | |
| High | CVE-2026-102097 | Kiteworks Email Protection Gateway remote code execution | 7.2 | |
| High | CVE-2026-102099 | Kiteworks Core arbitrary file write | 7.2 | |
| High | CVE-2026-102116 | Kiteworks Email Protection Gateway Path Traversal | 7.2 | |
| Critical | CVE-2026-102115 | Kiteworks Core Authentication Bypass in the Password Reset Workflow | 9.8 | |
| High | CVE-2026-102089 | Kiteworks Email Protection Gateway path traversal | 7.2 | |
| High | CVE-2026-102108 | Kiteworks Email Protection Gateway deserialization of untrusted data | 7.2 | |
| High | CVE-2026-102094 | Kiteworks Email Protection Gateway unsafe reflection | 7.2 | |
| Critical | CVE-2026-102106 | Kiteworks Email Protection Gateway improper authentication | 9.1 | |
| High | CVE-2026-102119 | Kiteworks Email Protection Gateway Path Traversal | 7.2 | |
| High | CVE-2026-102117 | Kiteworks Core Remote Code Execution | 7.2 | |
| High | CVE-2026-102142 | Kiteworks Core Remote Code Execution through Server-Side Template Injection | 7.2 | |
| High | CVE-2026-102130 | Kiteworks Email Protection Gateway Remote Code Execution | 7.2 | |
| High | CVE-2026-102131 | Kiteworks Email Protection Gateway Improper Handling of Case Sensitivity | 7.2 | |
| Medium | CVE-2026-102135 | Kiteworks Email Protection Gateway Deserialization of Untrusted Data | 6.6 | |
| Critical | CVE-2026-102102 | Kiteworks Email Protection Gateway server-side request forgery | 9.1 | |
| Medium | CVE-2026-102133 | Kiteworks Core Arbitrary File Write through Command Injection | 6.6 | |
| High | CVE-2026-102101 | Kiteworks Core deserialization of untrusted data | 8.1 | |
| High | CVE-2026-28269 | Kiteworks Core has an OS Command Injection | 5.9 | |
| Critical | CVE-2026-102104 | Kiteworks Email Protection Gateway server-side request forgery | 9.1 | |
| Critical | CVE-2026-102103 | Kiteworks Email Protection Gateway server-side request forgery | 9.1 | |
| High | CVE-2026-102132 | Kiteworks Core Privilege Escalation through Improper Access Control | 7.2 | |
| High | CVE-2026-102093 | Kiteworks Core improper privilege management | 7.2 |