K
Vendor security profile
Kiteworks
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs71
Critical9
CISA KEV0
Public exploit0
Patch rate%1
Avg. CVSS7.1
12-month vulnerability rate
1
0
0
0
0
0
0
9
0
0
61
0
CVE KEV
CVE severity distribution
71toplam CVE
Critical9 (13%)
High38 (54%)
Medium23 (32%)
Low1 (1%)
Patch and exploitation view
%1
Verified patch
%0
CISA KEV
%0
Public exploit
1Patch available
0Partial
0Workaround
0Vendor: no patch
70Unknown
Latest vulnerabilities
9.1
CVE-2026-102105
Kiteworks Email Protection Gateway server-side request forgery
K
Patch status unknownEPSS %1
9.1
CVE-2026-102106
Kiteworks Email Protection Gateway improper authentication
K
Patch status unknownEPSS %1
4.6
CVE-2026-102107
Kiteworks Core user impersonation in a file-request feature
K
Patch status unknownEPSS %0
7.2
CVE-2026-102108
Kiteworks Email Protection Gateway deserialization of untrusted data
K
Patch status unknownEPSS %1
7.1
CVE-2026-102109
Kiteworks Secure Data Forms SQL injection
K
Patch status unknownEPSS %0
5.9
CVE-2026-102110
Missing authentication on a Kiteworks appliance setup function
K
Patch status unknownEPSS %0
4.9
CVE-2026-102111
Kiteworks Core Improper Validation of Specified Quantity in Input
K
Patch status unknownEPSS %0
7.8
CVE-2026-102112
Kiteworks Core Local Privilege Escalation
K
Patch status unknownEPSS %0
7.8
CVE-2026-102113
Kiteworks Core Local Privilege Escalation
K
Patch status unknownEPSS %0
7.2
CVE-2026-102114
Kiteworks Core OS Command Injection
K
Patch status unknownEPSS %3