Kiteworks has 61 CVEs on record. Disclosure cadence is accelerating: 61 in the last 90 days against 0 in the 90 before. The busiest recent month was September 2026 with 61. The median CVSS is 7.2 (high), with 9 rated critical. None have a confirmed exploitation report. The dominant weakness classes are CWE-306 (7) and CWE-918 (7). Most affected products: Core (35), Email Protection Gateway (22), Secure Data Forms (4).

CVEs per month

Last 12 months, by publish date

1025/101125/111225/120126/010226/020326/030426/040526/050626/060726/070826/080926/09

Exploited share: 0% vs 1% corpus
Median CVSS: 7.2
Publish → KEV: —
Last 90 days: 61 prev 0

Weakness classes

Products

Core 35
Email Protection Gateway 22
Secure Data Forms 4

Follow Kiteworks:RSS feed Save a search →Embed badge ↗

Total CVEs

Critical

CISA KEV

Exploited

Worst active — by depth score

Kiteworks vulnerabilities

CVEs affecting Kiteworks, newest first. Open any entry for full detail, references, and exploit status.

61 CVEsRSS

CVEs per month

Weakness classes

Products

Worst active — by depth score

Kiteworks vulnerabilities

A path traversal weakness in an optional, non-default administrative feature allowed an authenticated administrator to move files to unintended locations outside the feature's designated directory

A local privilege escalation vulnerability in Kiteworks could have allowed an attacker with an existing shell under a low-privileged service account to escalate to root privileges on the appliance.

On deployments where the remote-support capability is licensed and enabled, an authenticated System Administrator who also possessed the key protecting the submitted data could redirect the underlying system's outbound support connection…

-A weakness could have allowed an authenticated Kiteworks Email Protection Gateway administrator to write a file outside its intended location and cause the application to execute it, potentially resulting in remote code execution as the…

Kiteworks Core did not correctly validate a parameter submitted to the password reset workflow

A command injection vulnerability in Kiteworks could allow a high-privileged authenticated administrator to execute arbitrary operating-system commands as root on the affected appliance node

A privilege escalation vulnerability in Kiteworks could allow an attacker who has already obtained code execution as an unprivileged backend service account on the appliance to escalate to root

A privilege escalation vulnerability in Kiteworks could allow an attacker who has already obtained code execution as an unprivileged backend service account on the appliance to escalate to root and run arbitrary commands with the highest…

Kiteworks did not enforce the maximum permitted value for a configurable security-policy setting

An endpoint used during initial appliance setup did not require authentication and did not correctly enforce its intended state precondition, so during the initial activation window an unauthenticated network attacker could repeatedly re…

A SQL injection vulnerability existed in Kiteworks Secure Data Forms, where a value derived from the authenticated user's stored account data was incorporated into a database query without proper sanitization

An authenticated administrator of Kiteworks Email Protection Gateway could submit a crafted serialized object to a cluster management interface that was deserialized without sufficient validation, potentially allowing arbitrary code exec…

Kiteworks Core contains a business logic flaw in a Kiteworks file-request feature allowed an authenticated user to send a request that appeared to originate from another user, because the server did not verify that the requester was auth…

Improper authentication in a Kiteworks Email Protection Gateway administrative service

Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Server-Side Request Forgery (SSRF)

Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Server-Side Request Forgery (SSRF)

Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Server-Side Request Forgery (SSRF)

Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Server-Side Request Forgery (SSRF)

Kiteworks Core before version 9.5.0 is vulnerable to Deserialization of Untrusted Data

Kiteworks Core before version 9.5.0 is vulnerable to Stored Cross-Site Scripting

Kiteworks Core before version 9.5.0 is vulnerable to Arbitrary File Write

Kiteworks Core before version 9.5.0 is vulnerable to SQL Injection

Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Remote Code Execution

Kiteworks Core before version 9.5.0 is vulnerable to OS Command Injection that allows an authenticated administrator to upload a configuration package whose contents were not sufficiently validated before being processed

Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Server-Side Request Forgery

Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Unsafe Reflection and does not sufficiently restrict the code that the mail-processing pipeline could load from an imported rule configuration

Kiteworks Core before version 9.5.0 is vulnerable to Improper Privilege Management and does not correctly enforce restrictions on role assignment, which could allow an authenticated administrative user with limited, non-Sysadmin role-man…

Kiteworks Core before version 9.5.0 is vulnerable to Stored Cross-site Scripting (XSS) that could allow an authenticated user to store crafted content that executes arbitrary JavaScript in another user's authenticated session when they p…

Kiteworks Secure Data Forms before version 9.5.0 is vulnerable to Server-Side Request Forgery that could allow an unauthenticated, remote attacker to make the server issue arbitrary outbound network requests and read back the responses

Kiteworks Core before version 9.5.1 is vulnerable to Content Injection