CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-19 13:10 UTC )
This week: 5,477 CVEs published, 360 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,477 Show in the list Critical, last 7 days 360 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,747 Show in the list Showing CVEs that name the product accellion:kiteworks . Show all products
80 CVEs, showing 51 to 80 Previous Page 2 of 2 CVE Severity Title Published CVE-2026-102132 High 7.2 Kiteworks Core Privilege Escalation through Improper Access Control Assigned by cisa-cg
Sep 30, 2026 CVE-2026-102131 High 7.2 Kiteworks Email Protection Gateway Improper Handling of Case Sensitivity Assigned by cisa-cg
Sep 30, 2026 CVE-2026-102130 High 7.2 Kiteworks Email Protection Gateway Remote Code Execution Assigned by cisa-cg
Sep 30, 2026 CVE-2026-102129 High 7.2 Kiteworks Core Incorrect Privilege Assignment Assigned by cisa-cg
Sep 30, 2026 CVE-2026-102128 High 7.5 Kiteworks Email Protection Gateway Improper Authentication Assigned by cisa-cg
Sep 30, 2026 CVE-2026-102127 High 7.0 Kiteworks Email Protection Gateway Improper Restriction of XML External Entity Reference Assigned by cisa-cg
Sep 30, 2026 CVE-2026-102126 High 8.1 Kiteworks Core Stored Cross-site Scripting (XSS) Assigned by cisa-cg
Sep 30, 2026 CVE-2026-102125 High 8.8 Kiteworks Core Sandbox Escape Assigned by cisa-cg
Sep 30, 2026 CVE-2026-102124 Medium 6.5 Kiteworks Core Missing Authentication for Critical Function Assigned by cisa-cg
Sep 30, 2026 CVE-2026-102103 Critical 9.1 Kiteworks Email Protection Gateway server-side request forgery Assigned by cisa-cg
Sep 30, 2026 CVE-2026-102123 High 7.4 Kiteworks Core Path Traversal Assigned by cisa-cg
Sep 30, 2026 CVE-2026-102122 Medium 4.3 Kiteworks Core Incorrect Authorization Assigned by cisa-cg
Sep 30, 2026 CVE-2026-102104 Critical 9.1 Kiteworks Email Protection Gateway server-side request forgery Assigned by cisa-cg
Sep 30, 2026 CVE-2026-102121 High 8.6 Kiteworks Secure Data Forms Exposure of Sensitive Information to an Unauthorized Actor Assigned by cisa-cg
Sep 30, 2026 CVE-2026-102120 High 8.8 Kiteworks Core OS Command Injection Assigned by cisa-cg
Sep 30, 2026 CVE-2026-102119 High 7.2 Kiteworks Email Protection Gateway Path Traversal Assigned by cisa-cg
Sep 30, 2026 CVE-2026-102118 High 7.8 Kiteworks Core before version 9.5.0 is vulnerable to Local Privilege Escalation Assigned by cisa-cg
Sep 30, 2026 CVE-2026-102117 High 7.2 Kiteworks Core Remote Code Execution Assigned by cisa-cg
Sep 30, 2026 CVE-2026-102116 High 7.2 Kiteworks Email Protection Gateway Path Traversal Assigned by cisa-cg
Sep 30, 2026 CVE-2026-102115 Critical 9.8 Kiteworks Core Authentication Bypass in the Password Reset Workflow Assigned by cisa-cg
Sep 30, 2026 CVE-2026-102114 High 7.2 Kiteworks Core OS Command Injection Assigned by cisa-cg
Sep 30, 2026 CVE-2026-102113 High 7.8 Kiteworks Core Local Privilege Escalation Assigned by cisa-cg
Sep 30, 2026 CVE-2026-102112 High 7.8 Kiteworks Core Local Privilege Escalation Assigned by cisa-cg
Sep 30, 2026 CVE-2026-102111 Medium 4.9 Kiteworks Core Improper Validation of Specified Quantity in Input Assigned by cisa-cg
Sep 30, 2026 CVE-2026-102110 Medium 5.9 Missing authentication on a Kiteworks appliance setup function Assigned by cisa-cg
Sep 30, 2026 CVE-2026-102109 High 7.1 Kiteworks Secure Data Forms SQL injection Assigned by cisa-cg
Sep 30, 2026 CVE-2026-102108 High 7.2 Kiteworks Email Protection Gateway deserialization of untrusted data Assigned by cisa-cg
Sep 30, 2026 CVE-2026-102107 Medium 4.6 Kiteworks Core user impersonation in a file-request feature Assigned by cisa-cg
Sep 30, 2026 CVE-2026-102106 Critical 9.1 Kiteworks Email Protection Gateway improper authentication Assigned by cisa-cg
Sep 30, 2026 CVE-2026-102105 Critical 9.1 Kiteworks Email Protection Gateway server-side request forgery Assigned by cisa-cg
Sep 30, 2026
CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
