CVE-2026-102111

4.9 MEDIUMpublic exploit available

Published 2026-09-30 · Updated 2026-10-01

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

Kiteworks did not enforce the maximum permitted value for a configurable security-policy setting. An authenticated administrator could set this value outside its intended range so that the associated control never activated, while the control continued to appear enabled in the administrative interface and audit log, allowing it to be silently rendered ineffective.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

Weaknesses

CWE-1284

Public exploit & PoC references

https://github.com/kiteworks/security-advisories/security/advisories/GHSA-4r97-hch3-g2f9

All references

https://github.com/kiteworks/security-advisories/security/advisories/GHSA-4r97-hch3-g2f9
https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/VA/white/2026/va-26-274-01.json

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

MEDIUMCVE-2025-36178
MEDIUMCVE-2026-101985
MEDIUMCVE-2026-101995
HIGHCVE-2026-102016
MEDIUMCVE-2026-102019
MEDIUMCVE-2026-102033
HIGHCVE-2026-102065
MEDIUMCVE-2026-102067

Related by shared AI tags and CWE weakness class. Browse the full archive.