4.1Mittel

CVE-2026-102137Kiteworks Core Unrestricted Upload of File with Dangerous Type

Kiteworks Core Veröffentlicht: (vor 1 Monat)

Beschreibung

An authenticated administrator could bypass the content validation applied to an administrative file upload and store a file containing dangerous content on the appliance. This did not by itself result in code execution, which would require a separate vulnerability to run the stored file.

Schwachstellentyp (CWE): CWE-434

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

HerstellerProduktVersionen
accellion kiteworks < 9.5.1
Kiteworks Core < 9.5.1, fixed 9.5.1

Referenzen und Patches

  • url Vendor Advisory
  • url Broken Link

CPE-Treffer (NVD) (1)

  • cpe:2.3:a:accellion:kiteworks:*:*:*:*:*:*:*:* < 9.5.1