Skip to content
OpenAdvisories
Medium · 6.5 CVE-2026-23635 EUVD-2026-15540

Kiteworks Secure Data Forms has a potential Unprotected Transport of Credentials

Published Mar 25, 2026 · Updated Mar 25, 2026 · Assigned by GitHub_M

Description

Kiteworks is a private data network (PDN). In Kiteworks Secure Data Forms prior to version 9.2.1, a misconfiguration of the security attributes could potentially lead to Unprotected Transport of Credentials under certain circumstances. Upgrade Kiteworks to version 9.2.1 or later to receive a patch.

Affected products

VendorProductAffectedFixed
kiteworks Secure Data Forms < 9.2.1 —

References