CVE-2026-102150高 7.2A function in the Kiteworks Advanced Forms component was reachable without authentication. An unauthenticated attacker could potentially use…
CVE-2026-102149緊急 9.4Kiteworks Email Protection Gateway did not sufficiently restrict which account a certificate could be assigned to. This could allow an attac…
CVE-2026-102147緊急 9.3A stored cross-site scripting (XSS) weakness in Kiteworks Core could allow an unauthenticated attacker to store crafted content that later e…
CVE-2026-102146中 6.5An authenticated Email Protection Gateway administrator holding only limited, delegated permissions could write files with attacker-controll…
CVE-2026-102145中 6.6An authenticated administrator could cause the server to issue requests to, and interact with, internal network services that are not meant …