CVE-2026-102117 is a high-severity vulnerability in Kiteworks Core affecting versions prior to 9.5.1. It allows an authenticated System Administrator with access to a key protecting submitted data to redirect the system's outbound support connection to an attacker-controlled destination. This redirection can lead to remote code execution with the privileges of a local service account.
CVE-2026-102118 is a local privilege escalation vulnerability in Kiteworks Core that allows an attacker with a low-privileged shell to escalate to root privileges on the appliance. The flaw involves improper link resolution before file access, categorized under CWE-59. It affects Kiteworks Core versions from 0 up to but not including 9.5.0. The vulnerability has a high severity with a CVSS score of 7.8.
CVE-2026-102119 is a path traversal vulnerability in the Kiteworks Email Protection Gateway affecting versions prior to 9.5.0. It exists in an optional, non-default administrative feature and allows an authenticated administrator to move files outside the intended directory. This could enable arbitrary code execution on the underlying system.
CVE-2026-102120 is a high-severity OS command injection vulnerability in Kiteworks Core affecting versions before 9.5.1. It allows an attacker with existing code execution on one cluster node to escalate privileges and execute OS commands on other nodes within the same cluster. The flaw arises from insufficient input validation in an internal cluster management function, which is not accessible externally and requires prior node access.
CVE-2026-102121 is a high-severity vulnerability in Kiteworks Secure Data Forms where an unauthenticated form-rendering interface exposes more data than intended. Published forms accessible to anonymous users could leak the form owner's account profile and some deployment configuration details, but no passwords, authentication tokens, or multi-factor authentication secrets were exposed.
Kiteworks Email Protection Gateway versions prior to 9.5.0 contain a Server-Side Request Forgery (SSRF) vulnerability. This flaw allows a remote, unauthenticated attacker to cause the gateway to send crafted requests to internal or unintended network destinations during an online certificate status check for inbound messages. Exploitation could lead to disclosure of sensitive internal information or disruption of gateway operations.
basic-ftp versions prior to 6.2.1 contain an inefficient regular expression complexity vulnerability in the Client.list() function. A malicious or compromised FTP server can cause the client to spend quadratic CPU time parsing directory listings, leading to event loop blocking and process freezing. This is due to backtracking in the RE_LINE regex when parsing Unix-style directory listings with certain crafted lines. The issue is resolved in version 6.2.1.
CVE-2026-102991 is a path traversal vulnerability in the Mako template library for Python, affecting versions prior to 1.4.2 on Windows. The issue arises because TemplateLookup.get_template() uses posixpath to resolve template URIs, while Template.__init__() validates them with os.path (ntpath on Windows). This mismatch allows crafted template URIs with drive designators to bypass directory restrictions, potentially exposing readable files and enabling execution of attacker-controlled templates. The vulnerability is fixed in version 1.4.2.
CVE-2026-103387 is a medium severity vulnerability in the garycourt uri-js library versions 4.4.0 and 4.4.1. It involves an uncaught exception in the URI.parse function's Mailto Header Handler component, which can be triggered remotely by manipulating the function's argument, potentially causing application errors. No official fix or patch has been announced, and the project has not responded to the issue report. Exploit code is publicly available, but no active exploitation in the wild has been reported.
CVE-2026-102122 is an authorization vulnerability in Kiteworks Core where users with the Manager role on a shared folder could improperly assign the Owner role to themselves or others. This occurs due to incorrect enforcement of role assignment permissions. The vulnerability affects versions prior to 9.5.1. The CVSS score is 4.3, indicating medium severity with limited impact on integrity and no impact on confidentiality or availability.
CVE-2026-102123 is a path traversal vulnerability in the Kiteworks Core appliance setup interface. It allows an unauthenticated attacker to write files outside the intended directory, potentially compromising the appliance's integrity or causing denial of service. Exploitation requires network access to the setup interface, which is not accessible in the default fully configured appliance but may be reachable during initial provisioning or non-default configurations. The vulnerability affects Kiteworks Core versions prior to 9.5.0.
Kiteworks Email Protection Gateway versions before 9.5.0 contain a Server-Side Request Forgery (SSRF) vulnerability. This flaw allows a remote, unauthenticated attacker to cause the gateway to send crafted requests to internal or unintended network destinations when retrieving a certificate revocation list from inbound messages. Exploitation could lead to disclosure of sensitive internal information or disruption of gateway operations.
CVE-2026-102124 is a vulnerability in the Kiteworks Core appliance setup interface where authentication is not enforced after initial configuration. This allows an unauthenticated attacker with network access to read and modify certain setup records such as contact name and email address. The vulnerability affects versions prior to 9.5.0. The CVSS score is 6.5, indicating a medium severity impact with limited confidentiality and integrity impact but no availability impact.
CVE-2026-102125 is a high-severity vulnerability in Kiteworks Core where the sandbox used for document conversion does not fully isolate the code running inside it. This allows code executing within the sandbox to escape confinement and operate with the privileges of the service account running the application. Exploitation could enable an attacker to read or modify application data and configuration or disrupt the service on the affected appliance.
CVE-2026-102126 is a stored cross-site scripting (XSS) vulnerability in Kiteworks Core. It allows a lower-privileged administrator with a narrowly scoped delegated permission to store malicious content. This content executes arbitrary JavaScript in the session of a System Administrator who views the affected page, potentially escalating privileges to full administrative control, including creating new admin accounts. The vulnerability affects Kiteworks Core versions from 0 up to but not including 9.5.1. The CVSS score is 8.1, indicating high severity.
CVE-2026-102127 is a high-severity vulnerability in Kiteworks Email Protection Gateway involving improper restriction of XML external entity references. When an optional, non-default message-processing feature is enabled, a remote unauthenticated attacker can send a crafted message that exploits the XML parser to read files accessible to the gateway service account, including sensitive cryptographic keys and credentials. This could lead to unauthorized disclosure of critical information.
CVE-2026-102128 is an improper authentication vulnerability in Kiteworks Email Protection Gateway. It allows the gateway to act on the Kiteworks platform on behalf of an unauthenticated user and provision platform accounts for unknown identities. A remote attacker without authentication could exploit this flaw to gain control over a platform account. The vulnerability affects versions prior to 9.5.1. The CVSS score is 7.5, indicating high severity due to the potential for unauthorized account control without user interaction.
CVE-2026-102129 is a privilege escalation vulnerability in Kiteworks Core where the user-provisioning interface fails to verify if an administrator is authorized to assign certain roles. This flaw allows an administrator with limited delegated permissions for role changes to escalate an account to full system-administrator privileges. The vulnerability affects Kiteworks Core versions from 0 up to but not including 9.5.1. It has a high severity with a CVSS score of 7.2. No known exploits are reported in the wild, and no patch information is provided.
CVE-2026-102130 is a high-severity vulnerability in Kiteworks Email Protection Gateway where insufficient validation of uploaded backup content allows an authenticated administrator to influence the application's loading process. This flaw could enable arbitrary code execution on the gateway under the service account's privileges.
CVE-2026-102131 is a high-severity vulnerability in Kiteworks Email Protection Gateway that allows an authenticated administrator to bypass input validation and execute arbitrary code. The gateway improperly controls code generation by failing to recognize all forms of certain configuration settings, enabling code injection. This can lead to execution of attacker-controlled files with the gateway service account privileges.