CVE-2026-29092

< 9.2.1

Kiteworks is a private data network (PDN). Prior to version 9.2.1, a vulnerability in Kiteworks Email Protection Gateway session m

4.9MEDIUM

CVE-2026-23636

< 9.2.1

Kiteworks is a private data network (PDN). In Kiteworks Secure Data Forms prior to version 9.2.1, the manager of a form could pote

5.5MEDIUM

CVE-2026-23635

< 9.2.1

Kiteworks is a private data network (PDN). In Kiteworks Secure Data Forms prior to version 9.2.1, a misconfiguration of the securi

6.5MEDIUM

CVE-2026-24750

< 9.2.1

Kiteworks is a private data network (PDN). In Kiteworks Secure Data Forms prior to version 9.2.1, an authenticated attacker could

7.6HIGH

CVE-2026-23514

all versions

Kiteworks is a private data network (PDN). Versions 9.2.0 and 9.2.1 of Kiteworks Core have an access control vulnerability that al

8.8HIGH

CVE-2026-28272

< 9.2.0

Kiteworks is a private data network (PDN). Prior to version 9.2.0, a vulnerability in Kiteworks Email Protection Gateway allows au

8.1HIGH

CVE-2026-28271

< 9.2.0

Kiteworks is a private data network (PDN). Prior to version 9.2.0, a vulnerability in Kiteworks configuration functionality allows

6.5MEDIUM

CVE-2026-28270

< 9.2.0

Kiteworks is a private data network (PDN). Prior to version 9.2.0, a vulnerability in Kiteworks configuration allows uploading of

4.9MEDIUM

CVE-2026-28269

< 9.2.0

Kiteworks is a private data network (PDN). Prior to version 9.2.0, avulnerability in Kiteworks command execution functionality all

5.9MEDIUM

CVE-2025-53939

< 9.1.0

Kiteworks is a private data network (PDN). Prior to version 9.1.0, improper input validation when managing roles of a shared folde

6.3MEDIUM

CVE-2021-31586

< 7.4.0

Accellion Kiteworks before 7.4.0 allows an authenticated user to perform SQL Injection via LDAPGroup Search.

8.8HIGH

CVE-2021-31585

< 7.3.1

Accellion Kiteworks before 7.3.1 allows a user with Admin privileges to escalate their privileges by generating SSH passwords that

6.7MEDIUM

CVE-2017-9421

< 2017.01.00

Authentication Bypass vulnerability in Accellion kiteworks before 2017.01.00 allows remote attackers to execute certain API calls

6.5MEDIUM