{"items":[{"id":"CVE-2026-84473","published":"2026-11-06T18:25:49.272Z","updated":"2026-11-06T18:25:49.272Z","title":"CVE-2026-84473","severity":"UNKNOWN","score":null,"vendor":"Kiteworks","product":"ownCloud","kev":false,"epss":null,"kevAdded":null},{"id":"CVE-2026-102105","published":"2026-09-30T20:25:02.880Z","updated":"2026-10-01T13:37:00.934Z","title":"Kiteworks Email Protection Gateway server-side request forgery","severity":"CRITICAL","score":9.1,"vendor":"Kiteworks","product":"Email Protection Gateway","kev":false,"epss":0.00524,"kevAdded":null},{"id":"CVE-2026-102106","published":"2026-09-30T20:24:46.723Z","updated":"2026-10-01T13:37:01.070Z","title":"Kiteworks Email Protection Gateway improper authentication","severity":"CRITICAL","score":9.1,"vendor":"Kiteworks","product":"Email Protection Gateway","kev":false,"epss":0.01071,"kevAdded":null},{"id":"CVE-2026-102107","published":"2026-09-30T20:24:29.840Z","updated":"2026-10-01T13:37:01.215Z","title":"Kiteworks Core user impersonation in a file-request feature","severity":"MEDIUM","score":4.6,"vendor":"Kiteworks","product":"Core","kev":false,"epss":0.00162,"kevAdded":null},{"id":"CVE-2026-102108","published":"2026-09-30T20:24:07.786Z","updated":"2026-10-01T13:37:01.381Z","title":"Kiteworks Email Protection Gateway deserialization of untrusted data","severity":"HIGH","score":7.2,"vendor":"Kiteworks","product":"Email Protection Gateway","kev":false,"epss":0.01459,"kevAdded":null},{"id":"CVE-2026-102109","published":"2026-09-30T20:23:36.117Z","updated":"2026-10-01T13:37:01.539Z","title":"Kiteworks Secure Data Forms SQL injection","severity":"HIGH","score":7.1,"vendor":"Kiteworks","product":"Secure Data Forms","kev":false,"epss":0.00368,"kevAdded":null},{"id":"CVE-2026-102110","published":"2026-09-30T20:21:42.338Z","updated":"2026-10-01T13:37:01.683Z","title":"Missing authentication on a Kiteworks appliance setup function","severity":"MEDIUM","score":5.9,"vendor":"Kiteworks","product":"Core","kev":false,"epss":0.00236,"kevAdded":null},{"id":"CVE-2026-102111","published":"2026-09-30T20:21:15.283Z","updated":"2026-10-01T13:37:01.832Z","title":"Kiteworks Core Improper Validation of Specified Quantity in Input","severity":"MEDIUM","score":4.9,"vendor":"Kiteworks","product":"Core","kev":false,"epss":0.00212,"kevAdded":null},{"id":"CVE-2026-102112","published":"2026-09-30T20:20:59.159Z","updated":"2026-10-01T13:37:02.000Z","title":"Kiteworks Core Local Privilege Escalation","severity":"HIGH","score":7.8,"vendor":"Kiteworks","product":"Core","kev":false,"epss":0.00375,"kevAdded":null},{"id":"CVE-2026-102113","published":"2026-09-30T20:20:35.928Z","updated":"2026-10-01T13:37:02.814Z","title":"Kiteworks Core Local Privilege Escalation","severity":"HIGH","score":7.8,"vendor":"Kiteworks","product":"Core","kev":false,"epss":0.00389,"kevAdded":null},{"id":"CVE-2026-102114","published":"2026-09-30T20:20:18.843Z","updated":"2026-10-01T13:37:02.961Z","title":"Kiteworks Core OS Command Injection","severity":"HIGH","score":7.2,"vendor":"Kiteworks","product":"Core","kev":false,"epss":0.0314,"kevAdded":null},{"id":"CVE-2026-102115","published":"2026-09-30T20:19:55.265Z","updated":"2026-10-01T13:37:03.130Z","title":"Kiteworks Core Authentication Bypass in the Password Reset Workflow","severity":"CRITICAL","score":9.8,"vendor":"Kiteworks","product":"Core","kev":false,"epss":0.01026,"kevAdded":null},{"id":"CVE-2026-102116","published":"2026-09-30T20:19:20.088Z","updated":"2026-10-01T13:37:03.301Z","title":"Kiteworks Email Protection Gateway Path Traversal","severity":"HIGH","score":7.2,"vendor":"Kiteworks","product":"Email Protection Gateway","kev":false,"epss":0.01955,"kevAdded":null},{"id":"CVE-2026-102117","published":"2026-09-30T20:19:02.903Z","updated":"2026-10-01T13:37:03.467Z","title":"Kiteworks Core Remote Code Execution","severity":"HIGH","score":7.2,"vendor":"Kiteworks","product":"Core","kev":false,"epss":0.01294,"kevAdded":null},{"id":"CVE-2026-102118","published":"2026-09-30T20:18:21.236Z","updated":"2026-10-01T13:37:03.614Z","title":"Kiteworks Core before version 9.5.0 is vulnerable to Local Privilege Escalation","severity":"HIGH","score":7.8,"vendor":"Kiteworks","product":"Core","kev":false,"epss":0.00397,"kevAdded":null},{"id":"CVE-2026-102119","published":"2026-09-30T20:18:01.841Z","updated":"2026-10-01T13:37:03.752Z","title":"Kiteworks Email Protection Gateway Path Traversal","severity":"HIGH","score":7.2,"vendor":"Kiteworks","product":"Email Protection Gateway","kev":false,"epss":0.01394,"kevAdded":null},{"id":"CVE-2026-102120","published":"2026-09-30T20:17:48.543Z","updated":"2026-10-01T13:37:03.903Z","title":"Kiteworks Core OS Command Injection","severity":"HIGH","score":8.8,"vendor":"Kiteworks","product":"Core","kev":false,"epss":0.00435,"kevAdded":null},{"id":"CVE-2026-102121","published":"2026-09-30T20:17:31.859Z","updated":"2026-10-01T13:37:04.051Z","title":"Kiteworks Secure Data Forms Exposure of Sensitive Information to an Unauthorized Actor","severity":"HIGH","score":8.6,"vendor":"Kiteworks","product":"Secure Data Forms","kev":false,"epss":0.00451,"kevAdded":null},{"id":"CVE-2026-102104","published":"2026-09-30T20:17:17.054Z","updated":"2026-10-01T13:37:04.205Z","title":"Kiteworks Email Protection Gateway server-side request forgery","severity":"CRITICAL","score":9.1,"vendor":"Kiteworks","product":"Email Protection Gateway","kev":false,"epss":0.00715,"kevAdded":null},{"id":"CVE-2026-102122","published":"2026-09-30T20:16:24.341Z","updated":"2026-10-01T13:37:04.360Z","title":"Kiteworks Core Incorrect Authorization","severity":"MEDIUM","score":4.3,"vendor":"Kiteworks","product":"Core","kev":false,"epss":0.00158,"kevAdded":null},{"id":"CVE-2026-102123","published":"2026-09-30T20:16:01.901Z","updated":"2026-10-01T13:37:04.500Z","title":"Kiteworks Core Path Traversal","severity":"HIGH","score":7.4,"vendor":"Kiteworks","product":"Core","kev":false,"epss":0.00991,"kevAdded":null},{"id":"CVE-2026-102103","published":"2026-09-30T20:16:00.743Z","updated":"2026-10-01T13:37:04.650Z","title":"Kiteworks Email Protection Gateway server-side request forgery","severity":"CRITICAL","score":9.1,"vendor":"Kiteworks","product":"Email Protection Gateway","kev":false,"epss":0.00715,"kevAdded":null},{"id":"CVE-2026-102124","published":"2026-09-30T20:15:38.627Z","updated":"2026-10-01T13:37:04.795Z","title":"Kiteworks Core Missing Authentication for Critical Function","severity":"MEDIUM","score":6.5,"vendor":"Kiteworks","product":"Core","kev":false,"epss":0.00208,"kevAdded":null},{"id":"CVE-2026-102125","published":"2026-09-30T20:15:25.475Z","updated":"2026-10-01T13:37:04.940Z","title":"Kiteworks Core Sandbox Escape","severity":"HIGH","score":8.8,"vendor":"Kiteworks","product":"Core","kev":false,"epss":0.00392,"kevAdded":null},{"id":"CVE-2026-102126","published":"2026-09-30T20:15:09.284Z","updated":"2026-10-01T13:37:05.091Z","title":"Kiteworks Core Stored Cross-site Scripting (XSS)","severity":"HIGH","score":8.1,"vendor":"Kiteworks","product":"Core","kev":false,"epss":0.0033,"kevAdded":null},{"id":"CVE-2026-102127","published":"2026-09-30T20:14:56.156Z","updated":"2026-10-01T13:37:05.291Z","title":"Kiteworks Email Protection Gateway Improper Restriction of XML External Entity Reference","severity":"HIGH","score":7,"vendor":"Kiteworks","product":"Email Protection Gateway","kev":false,"epss":0.00191,"kevAdded":null},{"id":"CVE-2026-102128","published":"2026-09-30T20:14:40.084Z","updated":"2026-10-01T13:37:05.460Z","title":"Kiteworks Email Protection Gateway Improper Authentication","severity":"HIGH","score":7.5,"vendor":"Kiteworks","product":"Email Protection Gateway","kev":false,"epss":0.0021,"kevAdded":null},{"id":"CVE-2026-102129","published":"2026-09-30T20:14:13.681Z","updated":"2026-10-01T13:37:05.610Z","title":"Kiteworks Core Incorrect Privilege Assignment","severity":"HIGH","score":7.2,"vendor":"Kiteworks","product":"Core","kev":false,"epss":0.00836,"kevAdded":null},{"id":"CVE-2026-102130","published":"2026-09-30T20:13:58.897Z","updated":"2026-10-01T13:37:05.756Z","title":"Kiteworks Email Protection Gateway Remote Code Execution","severity":"HIGH","score":7.2,"vendor":"Kiteworks","product":"Email Protection Gateway","kev":false,"epss":0.01185,"kevAdded":null},{"id":"CVE-2026-102131","published":"2026-09-30T20:13:43.236Z","updated":"2026-10-01T13:37:05.899Z","title":"Kiteworks Email Protection Gateway Improper Handling of Case Sensitivity","severity":"HIGH","score":7.2,"vendor":"Kiteworks","product":"Email Protection Gateway","kev":false,"epss":0.01185,"kevAdded":null},{"id":"CVE-2026-102132","published":"2026-09-30T20:13:28.434Z","updated":"2026-10-01T13:37:06.034Z","title":"Kiteworks Core Privilege Escalation through Improper Access Control","severity":"HIGH","score":7.2,"vendor":"Kiteworks","product":"Core","kev":false,"epss":0.0103,"kevAdded":null},{"id":"CVE-2026-102133","published":"2026-09-30T20:13:09.677Z","updated":"2026-10-01T13:37:06.177Z","title":"Kiteworks Core Arbitrary File Write through Command Injection","severity":"MEDIUM","score":6.6,"vendor":"Kiteworks","product":"Core","kev":false,"epss":0.01232,"kevAdded":null},{"id":"CVE-2026-102102","published":"2026-09-30T20:12:42.032Z","updated":"2026-10-01T13:37:06.475Z","title":"Kiteworks Email Protection Gateway server-side request forgery","severity":"CRITICAL","score":9.1,"vendor":"Kiteworks","product":"Email Protection Gateway","kev":false,"epss":0.00813,"kevAdded":null},{"id":"CVE-2026-102134","published":"2026-09-30T20:12:39.707Z","updated":"2026-10-01T13:37:06.623Z","title":"Kiteworks Core Unprotected Alternate Channel","severity":"MEDIUM","score":5.4,"vendor":"Kiteworks","product":"Core","kev":false,"epss":0.00209,"kevAdded":null},{"id":"CVE-2026-102135","published":"2026-09-30T20:12:22.410Z","updated":"2026-10-01T13:37:06.765Z","title":"Kiteworks Email Protection Gateway Deserialization of Untrusted Data","severity":"MEDIUM","score":6.6,"vendor":"Kiteworks","product":"Email Protection Gateway","kev":false,"epss":0.01276,"kevAdded":null},{"id":"CVE-2026-102136","published":"2026-09-30T20:12:07.108Z","updated":"2026-10-01T13:37:06.915Z","title":"Kiteworks Core Command Execution through Configuration Injection","severity":"MEDIUM","score":6.3,"vendor":"Kiteworks","product":"Core","kev":false,"epss":0.00125,"kevAdded":null},{"id":"CVE-2026-102137","published":"2026-09-30T20:11:52.485Z","updated":"2026-10-01T13:37:07.054Z","title":"Kiteworks Core Unrestricted Upload of File with Dangerous Type","severity":"MEDIUM","score":4.1,"vendor":"Kiteworks","product":"Core","kev":false,"epss":0.00275,"kevAdded":null},{"id":"CVE-2026-102138","published":"2026-09-30T20:11:32.172Z","updated":"2026-10-01T13:37:07.204Z","title":"Kiteworks Core Server-Side Request Forgery (SSRF)","severity":"LOW","score":3.3,"vendor":"Kiteworks","product":"Core","kev":false,"epss":0.00177,"kevAdded":null},{"id":"CVE-2026-102101","published":"2026-09-30T20:11:24.441Z","updated":"2026-10-01T13:37:07.362Z","title":"Kiteworks Core deserialization of untrusted data","severity":"HIGH","score":8.1,"vendor":"Kiteworks","product":"Core","kev":false,"epss":0.00939,"kevAdded":null},{"id":"CVE-2026-102139","published":"2026-09-30T20:11:17.678Z","updated":"2026-10-01T13:37:07.509Z","title":"Kiteworks Email Protection Gateway Incorrect Authorization","severity":"MEDIUM","score":6.5,"vendor":"Kiteworks","product":"Email Protection Gateway","kev":false,"epss":0.00394,"kevAdded":null},{"id":"CVE-2026-102140","published":"2026-09-30T20:11:07.754Z","updated":"2026-10-01T13:37:07.652Z","title":"Kiteworks Core Insufficient Verification of Data Authenticity","severity":"MEDIUM","score":4.9,"vendor":"Kiteworks","product":"Core","kev":false,"epss":0.0014,"kevAdded":null},{"id":"CVE-2026-102141","published":"2026-09-30T20:10:55.599Z","updated":"2026-10-07T15:52:15.930Z","title":"Kiteworks Core Privilege Escalation through External Control of File Name or Path","severity":"MEDIUM","score":6.7,"vendor":"Kiteworks","product":"Core","kev":false,"epss":0.00102,"kevAdded":null},{"id":"CVE-2026-102142","published":"2026-09-30T20:10:30.182Z","updated":"2026-10-01T15:28:05.497Z","title":"Kiteworks Core Remote Code Execution through Server-Side Template Injection","severity":"HIGH","score":7.2,"vendor":"Kiteworks","product":"Core","kev":false,"epss":0.01204,"kevAdded":null},{"id":"CVE-2026-102143","published":"2026-09-30T20:10:09.419Z","updated":"2026-10-01T15:28:05.636Z","title":"Kiteworks Email Protection Gateway Unrestricted Upload of File with Dangerous Type","severity":"HIGH","score":7.5,"vendor":"Kiteworks","product":"Email Protection Gateway","kev":false,"epss":0.00322,"kevAdded":null},{"id":"CVE-2026-102100","published":"2026-09-30T20:10:05.276Z","updated":"2026-10-07T15:52:16.061Z","title":"Kiteworks Core stored XSS","severity":"HIGH","score":8.7,"vendor":"Kiteworks","product":"Core","kev":false,"epss":0.00342,"kevAdded":null},{"id":"CVE-2026-102144","published":"2026-09-30T20:09:53.849Z","updated":"2026-10-01T15:28:05.773Z","title":"Kiteworks Email Protection Gateway Uncontrolled Resource Consumption","severity":"MEDIUM","score":5.3,"vendor":"Kiteworks","product":"Email Protection Gateway","kev":false,"epss":0.00363,"kevAdded":null},{"id":"CVE-2026-102150","published":"2026-09-30T20:09:36.216Z","updated":"2026-10-01T13:37:07.799Z","title":"Kiteworks Secure Data Forms Missing Authentication for Critical Function","severity":"HIGH","score":7.2,"vendor":"Kiteworks","product":"Secure Data Forms","kev":false,"epss":0.00249,"kevAdded":null},{"id":"CVE-2026-102149","published":"2026-09-30T20:09:21.510Z","updated":"2026-10-01T13:37:07.938Z","title":"Kiteworks Email Protection Gateway Improper Access Control","severity":"CRITICAL","score":9.4,"vendor":"Kiteworks","product":"Email Protection Gateway","kev":false,"epss":0.00239,"kevAdded":null},{"id":"CVE-2026-102147","published":"2026-09-30T20:09:08.315Z","updated":"2026-10-01T13:37:08.098Z","title":"Kiteworks Core Administrative Account Takeover through Stored Cross-site Scripting (XSS)","severity":"CRITICAL","score":9.3,"vendor":"Kiteworks","product":"Core","kev":false,"epss":0.00462,"kevAdded":null},{"id":"CVE-2026-102146","published":"2026-09-30T20:08:51.629Z","updated":"2026-10-01T13:37:08.241Z","title":"Kiteworks Email Protection Gateway Arbitrary File Write through Server-Side Template Injection","severity":"MEDIUM","score":6.5,"vendor":"Kiteworks","product":"Email Protection Gateway","kev":false,"epss":0.01009,"kevAdded":null},{"id":"CVE-2026-102145","published":"2026-09-30T20:08:34.493Z","updated":"2026-10-01T13:37:08.392Z","title":"Kiteworks Core Server-Side Request Forgery through CRLF Injection","severity":"MEDIUM","score":6.6,"vendor":"Kiteworks","product":"Core","kev":false,"epss":0.00282,"kevAdded":null},{"id":"CVE-2026-102097","published":"2026-09-30T20:07:48.088Z","updated":"2026-10-01T13:37:08.530Z","title":"Kiteworks Email Protection Gateway remote code execution","severity":"HIGH","score":7.2,"vendor":"Kiteworks","product":"Email Protection Gateway","kev":false,"epss":0.02168,"kevAdded":null},{"id":"CVE-2026-102096","published":"2026-09-30T20:07:35.549Z","updated":"2026-10-01T13:37:08.678Z","title":"Kiteworks Core OS command injection","severity":"HIGH","score":7.2,"vendor":"Kiteworks","product":"Core","kev":false,"epss":0.03332,"kevAdded":null},{"id":"CVE-2026-102099","published":"2026-09-30T20:07:29.583Z","updated":"2026-10-01T13:37:08.818Z","title":"Kiteworks Core arbitrary file write","severity":"HIGH","score":7.2,"vendor":"Kiteworks","product":"Core","kev":false,"epss":0.01968,"kevAdded":null},{"id":"CVE-2026-102095","published":"2026-09-30T20:07:22.551Z","updated":"2026-10-01T13:37:08.956Z","title":"Kiteworks Email Protection Gateway server-side request forgery","severity":"CRITICAL","score":9.1,"vendor":"Kiteworks","product":"Email Protection Gateway","kev":false,"epss":0.00408,"kevAdded":null},{"id":"CVE-2026-102094","published":"2026-09-30T20:07:06.939Z","updated":"2026-10-01T13:37:09.092Z","title":"Kiteworks Email Protection Gateway unsafe reflection","severity":"HIGH","score":7.2,"vendor":"Kiteworks","product":"Email Protection Gateway","kev":false,"epss":0.01459,"kevAdded":null},{"id":"CVE-2026-102093","published":"2026-09-30T20:06:49.237Z","updated":"2026-10-01T15:28:05.914Z","title":"Kiteworks Core improper privilege management","severity":"HIGH","score":7.2,"vendor":"Kiteworks","product":"Core","kev":false,"epss":0.0103,"kevAdded":null},{"id":"CVE-2026-102092","published":"2026-09-30T20:06:03.127Z","updated":"2026-10-01T15:28:06.066Z","title":"Kiteworks Core stored XSS","severity":"HIGH","score":8.7,"vendor":"Kiteworks","product":"Core","kev":false,"epss":0.0033,"kevAdded":null},{"id":"CVE-2026-102091","published":"2026-09-30T20:05:47.322Z","updated":"2026-10-01T13:37:09.226Z","title":"Kiteworks Secure Data Forms server-side request forgery","severity":"HIGH","score":7.5,"vendor":"Kiteworks","product":"Secure Data Forms","kev":false,"epss":0.00321,"kevAdded":null},{"id":"CVE-2026-102090","published":"2026-09-30T20:05:32.183Z","updated":"2026-10-01T13:37:09.360Z","title":"Kiteworks Core content injection","severity":"MEDIUM","score":4.3,"vendor":"Kiteworks","product":"Core","kev":false,"epss":0.00201,"kevAdded":null},{"id":"CVE-2026-102098","published":"2026-09-30T20:05:28.045Z","updated":"2026-10-01T13:37:09.488Z","title":"Kiteworks Core SQL Injection","severity":"HIGH","score":7.2,"vendor":"Kiteworks","product":"Core","kev":false,"epss":0.00999,"kevAdded":null},{"id":"CVE-2026-102089","published":"2026-09-30T20:05:02.985Z","updated":"2026-10-01T13:37:09.618Z","title":"Kiteworks Email Protection Gateway path traversal","severity":"HIGH","score":7.2,"vendor":"Kiteworks","product":"Email Protection Gateway","kev":false,"epss":0.01547,"kevAdded":null},{"id":"CVE-2026-24782","published":"2026-06-01T22:00:24.657Z","updated":"2026-06-02T12:30:33.683Z","title":"Kiteworks Secure Data Forms has a SQL Injection vulnerability","severity":"HIGH","score":7.6,"vendor":"kiteworks","product":"Secure Data Forms","kev":false,"epss":0.00667,"kevAdded":null},{"id":"CVE-2026-24761","published":"2026-06-01T21:52:53.195Z","updated":"2026-06-02T13:02:25.811Z","title":"Kiteworks Secure Data Forms is vulnerable to Authorization Bypass Through User-Controlled Key","severity":"LOW","score":3.7,"vendor":"kiteworks","product":"Secure Data Forms","kev":false,"epss":0.00142,"kevAdded":null},{"id":"CVE-2026-24756","published":"2026-06-01T21:51:04.450Z","updated":"2026-06-02T12:30:24.647Z","title":"Kiteworks Secure Data Forms is vulnerable to Authorization Bypass Through User-Controlled Key","severity":"MEDIUM","score":4.3,"vendor":"kiteworks","product":"Secure Data Forms","kev":false,"epss":0.00152,"kevAdded":null},{"id":"CVE-2026-24755","published":"2026-06-01T21:49:22.787Z","updated":"2026-06-02T15:51:03.593Z","title":"Kiteworks Secure Data Forms is vulnerable to Authorization Bypass Through User-Controlled Key","severity":"MEDIUM","score":5.4,"vendor":"kiteworks","product":"Secure Data Forms","kev":false,"epss":0.00138,"kevAdded":null},{"id":"CVE-2026-24754","published":"2026-06-01T21:46:56.301Z","updated":"2026-06-02T15:45:48.778Z","title":"Kiteworks Secure Data Forms Vulnerable to Cross-site Scripting","severity":"MEDIUM","score":5.4,"vendor":"kiteworks","product":"security-advisories","kev":false,"epss":0.00136,"kevAdded":null},{"id":"CVE-2026-24753","published":"2026-06-01T21:45:59.292Z","updated":"2026-06-02T12:29:53.036Z","title":"Kiteworks Secure Data Forms is vulnerable to Authorization Bypass Through User-Controlled Key","severity":"MEDIUM","score":6.5,"vendor":"kiteworks","product":"Secure Data Forms","kev":false,"epss":0.00174,"kevAdded":null},{"id":"CVE-2026-24752","published":"2026-06-01T21:43:25.166Z","updated":"2026-06-02T14:09:43.167Z","title":"Kiteworks Secure Data Forms Vulnerable to Cross-site Scripting","severity":"HIGH","score":8.2,"vendor":"kiteworks","product":"Secure Data Forms","kev":false,"epss":0.00283,"kevAdded":null},{"id":"CVE-2026-24751","published":"2026-06-01T18:50:07.550Z","updated":"2026-06-02T12:19:54.680Z","title":"Kiteworks Secure Data Forms Vulnerable to Cross-site Scripting","severity":"HIGH","score":8.2,"vendor":"kiteworks","product":"Secure Data Forms","kev":false,"epss":0.00289,"kevAdded":null},{"id":"CVE-2026-23638","published":"2026-06-01T18:11:35.851Z","updated":"2026-06-01T19:04:22.955Z","title":"Kiteworks Secure Data Forms is vulnerable to Authorization Bypass Through User-Controlled Key","severity":"MEDIUM","score":6.5,"vendor":"kiteworks","product":"Secure Data Forms","kev":false,"epss":0.00184,"kevAdded":null},{"id":"CVE-2026-29092","published":"2026-03-25T16:59:55.033Z","updated":"2026-03-25T17:29:41.481Z","title":"Kiteworks Email Protection Gateway has an Insufficient Session Expiration","severity":"MEDIUM","score":4.9,"vendor":"kiteworks","product":"Kiteworks Email Protection Gateway","kev":false,"epss":0.00247,"kevAdded":null},{"id":"CVE-2026-23636","published":"2026-03-25T16:58:36.194Z","updated":"2026-03-27T14:56:49.566Z","title":"Kiteworks Secure Data Forms is vulnerable to an Unrestricted Upload of File with Dangerous Type","severity":"MEDIUM","score":5.5,"vendor":"kiteworks","product":"Secure Data Forms","kev":false,"epss":0.01026,"kevAdded":null},{"id":"CVE-2026-23635","published":"2026-03-25T16:57:19.199Z","updated":"2026-03-25T18:06:51.357Z","title":"Kiteworks Secure Data Forms has a potential Unprotected Transport of Credentials","severity":"MEDIUM","score":6.5,"vendor":"kiteworks","product":"Secure Data Forms","kev":false,"epss":0.0033,"kevAdded":null},{"id":"CVE-2026-24750","published":"2026-03-25T15:22:16.694Z","updated":"2026-03-26T19:52:12.631Z","title":"Kiteworks Secure Data Forms vulnerable to Cross-site Scripting","severity":"HIGH","score":7.6,"vendor":"kiteworks","product":"Secure Data Forms","kev":false,"epss":0.00245,"kevAdded":null},{"id":"CVE-2026-23514","published":"2026-03-25T14:19:01.421Z","updated":"2026-03-25T14:45:43.015Z","title":"Kiteworks Core before 9.2.2 is vulnerable to Improper Ownership Management","severity":"HIGH","score":8.8,"vendor":"kiteworks","product":"core","kev":false,"epss":0.01058,"kevAdded":null},{"id":"CVE-2026-28272","published":"2026-02-27T20:22:59.656Z","updated":"2026-03-03T20:27:59.264Z","title":"Kiteworks Email Protection Gateway has a Cross-site Scripting vulnerability","severity":"HIGH","score":8.1,"vendor":"kiteworks","product":"security-advisories","kev":false,"epss":0.00382,"kevAdded":null},{"id":"CVE-2026-28271","published":"2026-02-27T20:21:12.194Z","updated":"2026-03-03T20:27:38.925Z","title":"Kiteworks Core is vulnerable to Server-Side Request Forgery (SSRF)","severity":"MEDIUM","score":6.5,"vendor":"kiteworks","product":"security-advisories","kev":false,"epss":0.00475,"kevAdded":null},{"id":"CVE-2026-28270","published":"2026-02-27T20:19:54.611Z","updated":"2026-03-03T20:27:18.932Z","title":"Kiteworks Core has an Unrestricted Upload of File with Dangerous Type","severity":"MEDIUM","score":4.9,"vendor":"kiteworks","product":"security-advisories","kev":false,"epss":0.01809,"kevAdded":null},{"id":"CVE-2026-28269","published":"2026-02-26T22:52:26.688Z","updated":"2026-02-27T17:53:05.993Z","title":"Kiteworks Core has an OS Command Injection","severity":"MEDIUM","score":5.9,"vendor":"kiteworks","product":"security-advisories","kev":false,"epss":0.02195,"kevAdded":null},{"id":"CVE-2025-53939","published":"2025-11-29T02:25:46.458Z","updated":"2025-12-01T15:37:03.826Z","title":"Kiteworks Core is vulnerable to Improper Input Validation","severity":"MEDIUM","score":6.3,"vendor":"kiteworks","product":"security-advisories","kev":false,"epss":0.00789,"kevAdded":null},{"id":"CVE-2025-53900","published":"2025-11-29T02:25:34.730Z","updated":"2025-12-01T15:39:42.616Z","title":"Kiteworks MFT has a Privilege Defined With Unsafe Actions","severity":"MEDIUM","score":6.5,"vendor":"kiteworks","product":"security-advisories","kev":false,"epss":0.01219,"kevAdded":null},{"id":"CVE-2025-53899","published":"2025-11-29T02:25:23.493Z","updated":"2025-12-01T15:41:27.509Z","title":"Kiteworks MFT is vulnerable to an Incorrectly Specified Destination in a Communication Channel","severity":"HIGH","score":7.2,"vendor":"kiteworks","product":"security-advisories","kev":false,"epss":0.01004,"kevAdded":null},{"id":"CVE-2025-53897","published":"2025-11-29T02:24:36.842Z","updated":"2025-12-01T15:42:56.666Z","title":"Kiteworks MFT has a Cross-Site Request Forgery (CSRF) vulnerability","severity":"MEDIUM","score":6.8,"vendor":"kiteworks","product":"security-advisories","kev":false,"epss":0.00217,"kevAdded":null},{"id":"CVE-2025-53896","published":"2025-11-29T02:24:18.115Z","updated":"2025-12-03T15:11:36.226Z","title":"Kiteworks MFT is vulnerable to Insufficient Session Expiration","severity":"HIGH","score":7.1,"vendor":"kiteworks","product":"security-advisories","kev":false,"epss":0.00209,"kevAdded":null},{"id":"CVE-2023-7273","published":"2024-10-01T12:34:10.481Z","updated":"2024-10-01T13:16:05.468Z","title":"Cross Site Request Forgery in Kiteworks OwnCloud","severity":"MEDIUM","score":6.8,"vendor":"Kiteworks","product":"OwnCloud","kev":false,"epss":0.00217,"kevAdded":null}]}