A
Vendor security profile4 actively exploited CVEs
accellion
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs69
Critical9
CISA KEV4
Public exploit4
Patch rate%7
Avg. CVSS7.3
12-month vulnerability rate
5
0
0
0
0
0
0
9
0
0
51
0
CVE KEV
CVE severity distribution
69toplam CVE
Critical9 (13%)
High38 (55%)
Medium18 (26%)
Uncertain4 (6%)
Patch and exploitation view
%7
Verified patch
%6
CISA KEV
%6
Public exploit
5Patch available
0Partial
4Workaround
0Vendor: no patch
60Unknown
Latest vulnerabilities
9.1
CVE-2026-102105
Kiteworks Email Protection Gateway server-side request forgery
K
Patch status unknownEPSS %1
9.1
CVE-2026-102106
Kiteworks Email Protection Gateway improper authentication
K
Patch status unknownEPSS %1
4.6
CVE-2026-102107
Kiteworks Core user impersonation in a file-request feature
K
Patch status unknownEPSS %0
7.2
CVE-2026-102108
Kiteworks Email Protection Gateway deserialization of untrusted data
K
Patch status unknownEPSS %1
7.1
CVE-2026-102109
Kiteworks Secure Data Forms SQL injection
K
Patch status unknownEPSS %0
4.9
CVE-2026-102111
Kiteworks Core Improper Validation of Specified Quantity in Input
K
Patch status unknownEPSS %0
7.8
CVE-2026-102112
Kiteworks Core Local Privilege Escalation
K
Patch status unknownEPSS %0
7.8
CVE-2026-102113
Kiteworks Core Local Privilege Escalation
K
Patch status unknownEPSS %0
7.2
CVE-2026-102114
Kiteworks Core OS Command Injection
K
Patch status unknownEPSS %3
9.8
CVE-2026-102115
Kiteworks Core Authentication Bypass in the Password Reset Workflow
K
Patch status unknownEPSS %1