Skip to content
OpenAdvisories
High · 7.2 CVE-2026-102114 EUVD-2026-90305

Kiteworks Core OS Command Injection

Published Sep 30, 2026 · Updated Oct 1, 2026 · Assigned by cisa-cg

Description

A command injection vulnerability in Kiteworks could allow a high-privileged authenticated administrator to execute arbitrary operating-system commands as root on the affected appliance node. Successful exploitation requires an administrative account with elevated privileges.

Affected products

VendorProductAffectedFixed
Kiteworks Core < 9.5.0 9.5.0

Advisories 3

References

  • url vendor-advisory
  • url third-party-advisory