← Back

CVE-2026-23514

nvd nist
Published: Mar 25, 2026Modified: Jun 17, 2026

JSON object

Loading...
6.5
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Exploitability: 2.8 / Impact: 3.6
Source: NVD

Description

Kiteworks is a private data network (PDN). Versions 9.2.0 and 9.2.1 of Kiteworks Core have an access control vulnerability that allows authenticated users to access unauthorized content. Upgrade Kiteworks Core to version 9.2.2 or later to receive a patch.

Affected (2)

Products: Accellion: Kiteworks
Accellion
1 product
Kiteworks
Configuration A
2 vulnerable
Vulnerable SoftwareAffected Versions
Accellion
Kiteworks
Version 9.2.0
Kiteworks
Version 9.2.1

Related CWEs

CWE-282
Improper Ownership Management
The product assigns the wrong ownership, or does not properly verify the ownership, of an object or resource.

References (1)

Source: security-advisories@github.com
Vendor Advisory

Timeline

No history available yet.