7.2Yüksek

CVE-2026-102114Kiteworks Core OS Command Injection

Kiteworks Core Yayım: (1 ay önce)

Açıklama

A command injection vulnerability in Kiteworks could allow a high-privileged authenticated administrator to execute arbitrary operating-system commands as root on the affected appliance node. Successful exploitation requires an administrative account with elevated privileges.

Zayıflık türü (CWE): CWE-78

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

ÜreticiÜrünSürümler
accellion kiteworks < 9.5.0
Kiteworks Core < 9.5.0, fixed 9.5.0

Kaynaklar ve yamalar

  • url vendor-advisoryVendor Advisory
  • url third-party-advisoryBroken Link

CPE eşleşmeleri (NVD) (1)

  • cpe:2.3:a:accellion:kiteworks:*:*:*:*:*:*:*:* < 9.5.0