kiteworks vulnerabilities
CVEs whose affected-version data names the kiteworks package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
62 CVEsRSS
CVE-2026-102089High· 7.2Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to a path traversal weakness in an administrative import function allowed an authenticated administrator to write files to arbitrary locations on the server
Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to a path traversal weakness in an administrative import function allowed an authenticated administrator to write files to arbitrary locations on the server. This coul…
▾ Twilightaccellion · kiteworksEPSS 1.5%via NVD
CVE-2025-53939Medium· 6.3Kiteworks is a private data network (PDN)
Kiteworks is a private data network (PDN). Prior to version 9.1.0, improper input validation when managing roles of a shared folder could lead to unexpectedly elevate another user's permissions on the share. This issue has been patched i…
▾ Sunlitaccellion · kiteworksEPSS 0.74%via NVD