4.1Orta

CVE-2026-102137Kiteworks Core Unrestricted Upload of File with Dangerous Type

Kiteworks Core Yayım: (1 ay önce)

Açıklama

An authenticated administrator could bypass the content validation applied to an administrative file upload and store a file containing dangerous content on the appliance. This did not by itself result in code execution, which would require a separate vulnerability to run the stored file.

Zayıflık türü (CWE): CWE-434

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

ÜreticiÜrünSürümler
accellion kiteworks < 9.5.1
Kiteworks Core < 9.5.1, fixed 9.5.1

Kaynaklar ve yamalar

  • url Vendor Advisory
  • url Broken Link

CPE eşleşmeleri (NVD) (1)

  • cpe:2.3:a:accellion:kiteworks:*:*:*:*:*:*:*:* < 9.5.1