CVE-2026-24754

概要

参考情報

• kiteworks/security-advisories security advisory · Vendor Advisory

kiteworks のその他の脆弱性

• CVE-2026-102150高 7.2A function in the Kiteworks Advanced Forms component was reachable without authentication. An unauthenticated attacker could potentially use…
• CVE-2026-102149緊急 9.4Kiteworks Email Protection Gateway did not sufficiently restrict which account a certificate could be assigned to. This could allow an attac…
• CVE-2026-102147緊急 9.3A stored cross-site scripting (XSS) weakness in Kiteworks Core could allow an unauthenticated attacker to store crafted content that later e…
• CVE-2026-102146中 6.5An authenticated Email Protection Gateway administrator holding only limited, delegated permissions could write files with attacker-controll…
• CVE-2026-102145中 6.6An authenticated administrator could cause the server to issue requests to, and interact with, internal network services that are not meant …