kiteworks security-advisories vulnerabilities

CVEs per yearBy the year they were published

1. 20255
2. 20265

Newest CVEs

• CVE-2026-24754

  Kiteworks Secure Data Forms Vulnerable to Cross-site Scripting

  kiteworks · security-advisories

  Medium5.4
• CVE-2026-28272

  Kiteworks Email Protection Gateway has a Cross-site Scripting vulnerability

  kiteworks · security-advisories

  High8.1
• CVE-2026-28271

  Kiteworks Core is vulnerable to Server-Side Request Forgery (SSRF)

  kiteworks · security-advisories

  Medium6.5
• CVE-2026-28270

  Kiteworks Core has an Unrestricted Upload of File with Dangerous Type

  kiteworks · security-advisories

  Medium4.9
• CVE-2026-28269

  Kiteworks Core has an OS Command Injection

  kiteworks · security-advisories

  Medium5.9
• CVE-2025-53939

  Kiteworks Core is vulnerable to Improper Input Validation

  kiteworks · security-advisories

  Medium6.3
• CVE-2025-53900

  Kiteworks MFT has a Privilege Defined With Unsafe Actions

  kiteworks · security-advisories

  Medium6.5
• CVE-2025-53899

  Kiteworks MFT is vulnerable to an Incorrectly Specified Destination in a Communication Channel

  kiteworks · security-advisories

  High7.2
• CVE-2025-53897

  Kiteworks MFT has a Cross-Site Request Forgery (CSRF) vulnerability

  kiteworks · security-advisories

  Medium6.8
• CVE-2025-53896

  Kiteworks MFT is vulnerable to Insufficient Session Expiration

  kiteworks · security-advisories

  High7.1