Skip to content
OpenAdvisories

Vendor

Kiteworks

86 known vulnerabilities.

Products

Core 36 Email Protection Gateway 22 Secure Data Forms 15 security-advisories 10 OwnCloud 2 Kiteworks Email Protection Gateway 1 kiteworks 0
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 3.3
    CVE-2026-102138

    Kiteworks Core Server-Side Request Forgery (SSRF)

    An authenticated administrator on a node with an optional, separately licensed gateway role enabled could supply a connector URL that the server retrieved without sufficient validation of its scheme or destination, causing the server to issue requests to inte…

    Kiteworks Core
  • Low 3.7
    CVE-2026-24761

    Kiteworks Secure Data Forms is vulnerable to Authorization Bypass Through User-Controlled Key

    Kiteworks is a private data network (PDN). Prior to version 9.3.0, an Insecure Direct Object Reference (IDOR) vulnerability in Kiteworks Secure Data Forms allows an authenticated user to access metadata of resources belonging to other users due to insufficien…

    Kiteworks Secure Data Forms