Skip to content
OpenAdvisories

Product · Kiteworks

Core

36 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-102115

    Kiteworks Core Authentication Bypass in the Password Reset Workflow

    Kiteworks Core did not correctly validate a parameter submitted to the password reset workflow. An unauthenticated attacker who knew the email address of a user with a locally stored password could potentially reset that account's password without access to t…

    Kiteworks Core
  • Critical 9.3
    CVE-2026-102147

    Kiteworks Core Administrative Account Takeover through Stored Cross-site Scripting (XSS)

    A stored cross-site scripting (XSS) weakness in Kiteworks Core could allow an unauthenticated attacker to store crafted content that later executes arbitrary JavaScript in the authenticated session of an administrator who views the affected page. This could h…

    Kiteworks Core