Product by Kiteworks
Kiteworks Core
36 known vulnerabilities in Kiteworks Core (Kiteworks), 0 of them actively exploited (CISA KEV).
Key figures
36
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-102096 | Kiteworks Core OS command injection | 7.2 | |
| High | CVE-2026-102114 | Kiteworks Core OS Command Injection | 7.2 | |
| High | CVE-2026-102099 | Kiteworks Core arbitrary file write | 7.2 | |
| Critical | CVE-2026-102115 | Kiteworks Core Authentication Bypass in the Password Reset Workflow | 9.8 | |
| High | CVE-2026-102117 | Kiteworks Core Remote Code Execution | 7.2 | |
| High | CVE-2026-102142 | Kiteworks Core Remote Code Execution through Server-Side Template Injection | 7.2 | |
| Medium | CVE-2026-102133 | Kiteworks Core Arbitrary File Write through Command Injection | 6.6 | |
| High | CVE-2026-102101 | Kiteworks Core deserialization of untrusted data | 8.1 | |
| High | CVE-2026-102132 | Kiteworks Core Privilege Escalation through Improper Access Control | 7.2 | |
| High | CVE-2026-102093 | Kiteworks Core improper privilege management | 7.2 | |
| High | CVE-2026-102123 | Kiteworks Core Path Traversal | 7.4 | |
| High | CVE-2026-102098 | Kiteworks Core SQL Injection | 7.2 | |
| High | CVE-2026-23514 | Kiteworks Core before 9.2.2 is vulnerable to Improper Ownership Management | 8.8 | |
| High | CVE-2026-102129 | Kiteworks Core Incorrect Privilege Assignment | 7.2 | |
| Critical | CVE-2026-102147 | Kiteworks Core Administrative Account Takeover through Stored Cross-site Scripting (XSS) | 9.3 | |
| High | CVE-2026-102120 | Kiteworks Core OS Command Injection | 8.8 | |
| High | CVE-2026-102125 | Kiteworks Core Sandbox Escape | 8.8 | |
| High | CVE-2026-102100 | Kiteworks Core stored XSS | 8.7 | |
| High | CVE-2026-102092 | Kiteworks Core stored XSS | 8.7 | |
| High | CVE-2026-102118 | Kiteworks Core before version 9.5.0 is vulnerable to Local Privilege Escalation | 7.8 | |
| High | CVE-2026-102113 | Kiteworks Core Local Privilege Escalation | 7.8 | |
| High | CVE-2026-102112 | Kiteworks Core Local Privilege Escalation | 7.8 | |
| High | CVE-2026-102126 | Kiteworks Core Stored Cross-site Scripting (XSS) | 8.1 | |
| Medium | CVE-2026-102145 | Kiteworks Core Server-Side Request Forgery through CRLF Injection | 6.6 | |
| Medium | CVE-2026-102141 | Kiteworks Core Privilege Escalation through External Control of File Name or Path | 6.7 |