CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-19 08:30 UTC )
This week: 5,433 CVEs published, 355 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,433 Show in the list Critical, last 7 days 355 Show in the list Healthcare-tagged, last 7 days 4 Show in the list Known exploited (CISA KEV) 1,747 Show in the list Showing CVEs that name the product kiteworks:core . Show all products
35 CVEs, showing 1 to 35
CVE Severity Title Published CVE-2026-102107 Medium 4.6 Kiteworks Core user impersonation in a file-request feature Assigned by cisa-cg
Sep 30, 2026 CVE-2026-102110 Medium 5.9 Missing authentication on a Kiteworks appliance setup function Assigned by cisa-cg
Sep 30, 2026 CVE-2026-102111 Medium 4.9 Kiteworks Core Improper Validation of Specified Quantity in Input Assigned by cisa-cg
Sep 30, 2026 CVE-2026-102112 High 7.8 Kiteworks Core Local Privilege Escalation Assigned by cisa-cg
Sep 30, 2026 CVE-2026-102113 High 7.8 Kiteworks Core Local Privilege Escalation Assigned by cisa-cg
Sep 30, 2026 CVE-2026-102114 High 7.2 Kiteworks Core OS Command Injection Assigned by cisa-cg
Sep 30, 2026 CVE-2026-102115 Critical 9.8 Kiteworks Core Authentication Bypass in the Password Reset Workflow Assigned by cisa-cg
Sep 30, 2026 CVE-2026-102117 High 7.2 Kiteworks Core Remote Code Execution Assigned by cisa-cg
Sep 30, 2026 CVE-2026-102118 High 7.8 Kiteworks Core before version 9.5.0 is vulnerable to Local Privilege Escalation Assigned by cisa-cg
Sep 30, 2026 CVE-2026-102120 High 8.8 Kiteworks Core OS Command Injection Assigned by cisa-cg
Sep 30, 2026 CVE-2026-102122 Medium 4.3 Kiteworks Core Incorrect Authorization Assigned by cisa-cg
Sep 30, 2026 CVE-2026-102123 High 7.4 Kiteworks Core Path Traversal Assigned by cisa-cg
Sep 30, 2026 CVE-2026-102124 Medium 6.5 Kiteworks Core Missing Authentication for Critical Function Assigned by cisa-cg
Sep 30, 2026 CVE-2026-102125 High 8.8 Kiteworks Core Sandbox Escape Assigned by cisa-cg
Sep 30, 2026 CVE-2026-102126 High 8.1 Kiteworks Core Stored Cross-site Scripting (XSS) Assigned by cisa-cg
Sep 30, 2026 CVE-2026-102129 High 7.2 Kiteworks Core Incorrect Privilege Assignment Assigned by cisa-cg
Sep 30, 2026 CVE-2026-102132 High 7.2 Kiteworks Core Privilege Escalation through Improper Access Control Assigned by cisa-cg
Sep 30, 2026 CVE-2026-102133 Medium 6.6 Kiteworks Core Arbitrary File Write through Command Injection Assigned by cisa-cg
Sep 30, 2026 CVE-2026-102134 Medium 5.4 Kiteworks Core Unprotected Alternate Channel Assigned by cisa-cg
Sep 30, 2026 CVE-2026-102136 Medium 6.3 Kiteworks Core Command Execution through Configuration Injection Assigned by cisa-cg
Sep 30, 2026 CVE-2026-102137 Medium 4.1 Kiteworks Core Unrestricted Upload of File with Dangerous Type Assigned by cisa-cg
Sep 30, 2026 CVE-2026-102138 Low 3.3 Kiteworks Core Server-Side Request Forgery (SSRF) Assigned by cisa-cg
Sep 30, 2026 CVE-2026-102101 High 8.1 Kiteworks Core deserialization of untrusted data Assigned by cisa-cg
Sep 30, 2026 CVE-2026-102140 Medium 4.9 Kiteworks Core Insufficient Verification of Data Authenticity Assigned by cisa-cg
Sep 30, 2026 CVE-2026-102141 Medium 6.7 Kiteworks Core Privilege Escalation through External Control of File Name or Path Assigned by cisa-cg
Sep 30, 2026 CVE-2026-102142 High 7.2 Kiteworks Core Remote Code Execution through Server-Side Template Injection Assigned by cisa-cg
Sep 30, 2026 CVE-2026-102100 High 8.7 Kiteworks Core stored XSS Assigned by cisa-cg
Sep 30, 2026 CVE-2026-102147 Critical 9.3 Kiteworks Core Administrative Account Takeover through Stored Cross-site Scripting (XSS) Assigned by cisa-cg
Sep 30, 2026 CVE-2026-102145 Medium 6.6 Kiteworks Core Server-Side Request Forgery through CRLF Injection Assigned by cisa-cg
Sep 30, 2026 CVE-2026-102096 High 7.2 Kiteworks Core OS command injection Assigned by cisa-cg
Sep 30, 2026 CVE-2026-102099 High 7.2 Kiteworks Core arbitrary file write Assigned by cisa-cg
Sep 30, 2026 CVE-2026-102093 High 7.2 Kiteworks Core improper privilege management Assigned by cisa-cg
Sep 30, 2026 CVE-2026-102092 High 8.7 Kiteworks Core stored XSS Assigned by cisa-cg
Sep 30, 2026 CVE-2026-102090 Medium 4.3 Kiteworks Core content injection Assigned by cisa-cg
Sep 30, 2026 CVE-2026-102098 High 7.2 Kiteworks Core SQL Injection Assigned by cisa-cg
Sep 30, 2026
CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
