4.9Media
CVE-2026-28270Kiteworks Core has an Unrestricted Upload of File with Dangerous Type
Descripción
Kiteworks is a private data network (PDN). Prior to version 9.2.0, a vulnerability in Kiteworks configuration allows uploading of arbitrary files without proper validation. Malicious administrators could exploit this to upload unauthorized file types to the system. Version 9.2.0 contains a patch for the issue.
Debilidad (CWE):
CWE-434
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
| Fabricante | Producto | Versiones | |
|---|---|---|---|
| accellion | kiteworks | < 9.2.0 | |
| kiteworks | security-advisories | < 9.2.0 |
Referencias y parches
Coincidencias CPE (NVD) (1)
cpe:2.3:a:accellion:kiteworks:*:*:*:*:*:*:*:*< 9.2.0