今日共收录 1399 条安全情报，包含 504 个 CVE，518 篇安全通告，以及 100 篇研究论文。
← 返回归档列表CVE-2026-102137
An authenticated administrator could bypass the content validation applied to an administrative file upload and store a
CVE-2026-102136
In multi-node deployments, an attacker who had already obtained code execution on one appliance node could submit a valu
CVE-2026-102133
An optional, separately licensed repository-connector feature in Kiteworks Core did not neutralize special characters in
CVE-2026-102132
An administrative import function in Kiteworks Core did not verify that the requesting administrator was entitled to cre
CVE-2026-102129
A user-provisioning interface in Kiteworks Core did not verify that the requesting administrator was entitled to grant t
CVE-2026-102126
A stored cross-site scripting (XSS) weakness in Kiteworks Core could allow an administrator holding only a single, narro
CVE-2026-102125
The sandbox that isolates document conversion on a Kiteworks appliance did not fully confine the code running inside it.
CVE-2026-102124
A Kiteworks appliance setup interface did not enforce authentication once the appliance had completed initial configurat
CVE-2026-102123
A Kiteworks appliance setup interface did not confine a user-supplied file path to its intended directory, which could a
CVE-2026-102122
Kiteworks did not correctly enforce which roles a shared folder's manager was permitted to assign. In a default configur
CVE-2026-102121
A form-rendering interface in the Advanced Forms component is reachable without authentication so that published forms c
CVE-2026-102120
A privilege escalation vulnerability in Kiteworks could have allowed an attacker who had already obtained code execution
CVE-2026-102119
A path traversal weakness in an optional, non-default administrative feature allowed an authenticated administrator to m
CVE-2026-102118
A local privilege escalation vulnerability in Kiteworks could have allowed an attacker with an existing shell under a lo
CVE-2026-102117
On deployments where the remote-support capability is licensed and enabled, an authenticated System Administrator who al
CVE-2026-102114
A command injection vulnerability in Kiteworks could allow a high-privileged authenticated administrator to execute arbi
CVE-2026-102113
A privilege escalation vulnerability in Kiteworks could allow an attacker who has already obtained code execution as an
CVE-2026-102112
A privilege escalation vulnerability in Kiteworks could allow an attacker who has already obtained code execution as an
CVE-2026-102111
Kiteworks did not enforce the maximum permitted value for a configurable security-policy setting. An authenticated admin
CVE-2026-102110
An endpoint used during initial appliance setup did not require authentication and did not correctly enforce its intende