Skip to content
OpenAdvisories
Medium · 4.9 CVE-2026-28270 EUVD-2026-9065

Kiteworks Core has an Unrestricted Upload of File with Dangerous Type

Published Feb 27, 2026 · Updated Mar 3, 2026 · Assigned by GitHub_M

Description

Kiteworks is a private data network (PDN). Prior to version 9.2.0, a vulnerability in Kiteworks configuration allows uploading of arbitrary files without proper validation. Malicious administrators could exploit this to upload unauthorized file types to the system. Version 9.2.0 contains a patch for the issue.

Affected products

VendorProductAffectedFixed
kiteworks security-advisories < 9.2.0 —

References