Product by Kiteworks
Security-advisories
10 known vulnerabilities in Security-advisories (Kiteworks), 0 of them actively exploited (CISA KEV).
Key figures
10
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-28269 | Kiteworks Core has an OS Command Injection | 5.9 | |
| High | CVE-2026-28270 | Kiteworks Core has an Unrestricted Upload of File with Dangerous Type | 4.9 | |
| High | CVE-2025-53900 | Kiteworks MFT has a Privilege Defined With Unsafe Actions | 6.5 | |
| High | CVE-2025-53899 | Kiteworks MFT is vulnerable to an Incorrectly Specified Destination in a Communication Channel | 7.2 | |
| High | CVE-2025-53939 | Kiteworks Core is vulnerable to Improper Input Validation | 6.3 | |
| High | CVE-2026-28272 | Kiteworks Email Protection Gateway has a Cross-site Scripting vulnerability | 8.1 | |
| Medium | CVE-2026-28271 | Kiteworks Core is vulnerable to Server-Side Request Forgery (SSRF) | 6.5 | |
| High | CVE-2025-53896 | Kiteworks MFT is vulnerable to Insufficient Session Expiration | 7.1 | |
| Medium | CVE-2025-53897 | Kiteworks MFT has a Cross-Site Request Forgery (CSRF) vulnerability | 6.8 | |
| Medium | CVE-2026-24754 | Kiteworks Secure Data Forms Vulnerable to Cross-site Scripting | 5.4 |