CVE-2026-102112
7.8 HIGHpublic exploit availablePublished 2026-09-30 · Updated 2026-10-01
AI risk analysis
- Summary
- This vulnerability allows an attacker with code execution privileges on a backend service account to escalate to root and execute arbitrary commands with the highest privileges, posing a significant risk to the system's security.
- Exploitability
- Exploitation requires existing local access to the backend service account and is relatively straightforward given the attacker's initial foothold.
- Blast radius
- If exploited, the attacker could gain full control over the system, leading to potential data loss, system compromise, and unauthorized access to sensitive information.
- Detection
- No reliable host or network indicator is derivable from the published description.
- Prioritized remediation
- Disable the affected backend service account or restrict access to it to prevent unauthorized code execution.
rceprivilege-escalationbackendlocal-privilege
Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.
NVD description
A privilege escalation vulnerability in Kiteworks could allow an attacker who has already obtained code execution as an unprivileged backend service account on the appliance to escalate to root and run arbitrary commands with the highest privileges. Exploitation requires existing local access to that service account.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-78, CWE-269
Public exploit & PoC references
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- HIGHCVE-2026-102113PoC
- HIGHCVE-2026-103106
- HIGHCVE-2026-47505PoC
- HIGHCVE-2026-47510PoC
- HIGHCVE-2026-47516PoC
- HIGHCVE-2026-47519PoC
- HIGHCVE-2026-47521PoC
- HIGHCVE-2026-47535PoC
Related by shared AI tags and CWE weakness class. Browse the full archive.