CVE-2026-102124Kiteworks Core Missing Authentication for Critical Function

Description

A Kiteworks appliance setup interface did not enforce authentication once the appliance had completed initial configuration. An unauthenticated attacker with network access to the appliance could read and modify a limited set of setup records, including a contact name and email address captured during initial configuration.

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

References and patches

• url vendor-advisoryVendor Advisory
• url third-party-advisoryBroken Link