Skip to content
OpenAdvisories

Product · Kiteworks

security-advisories

10 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.1
    CVE-2026-28272

    Kiteworks Email Protection Gateway has a Cross-site Scripting vulnerability

    Kiteworks is a private data network (PDN). Prior to version 9.2.0, a vulnerability in Kiteworks Email Protection Gateway allows authenticated administrators to inject malicious scripts through a configuration interface. The stored script executes when users i…

    Kiteworks security-advisories
  • High 7.2
    CVE-2025-53899

    Kiteworks MFT is vulnerable to an Incorrectly Specified Destination in a Communication Channel

    Kiteworks MFT orchestrates end-to-end file transfer workflows. Prior to version 9.1.0, the back-end of Kiteworks MFT is vulnerable to an incorrectly specified destination in a communication channel which allows an attacker with administrative privileges on th…

    Kiteworks security-advisories
  • High 7.1
    CVE-2025-53896

    Kiteworks MFT is vulnerable to Insufficient Session Expiration

    Kiteworks MFT orchestrates end-to-end file transfer workflows. Prior to version 9.1.0, a bug in Kiteworks MFT could cause under certain circumstances that a user's active session would not properly time out due to inactivity. This issue has been patched in ve…

    Kiteworks security-advisories