CVE-2026-102137

4.1 MEDIUMpublic exploit available

Published 2026-09-30 · Updated 2026-10-01

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

An authenticated administrator could bypass the content validation applied to an administrative file upload and store a file containing dangerous content on the appliance. This did not by itself result in code execution, which would require a separate vulnerability to run the stored file.

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L

Weaknesses

CWE-434

Public exploit & PoC references

https://github.com/kiteworks/security-advisories/security/advisories/GHSA-m6cv-4pjv-7435

All references

https://github.com/kiteworks/security-advisories/security/advisories/GHSA-m6cv-4pjv-7435
https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/VA/white/2026/va-26-274-01.json

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

CRITICALCVE-2023-54405PoC
HIGHCVE-2025-15700
HIGHCVE-2026-100389
MEDIUMCVE-2026-101071PoC
HIGHCVE-2026-102130PoC
HIGHCVE-2026-102143PoC
MEDIUMCVE-2026-102263
MEDIUMCVE-2026-102366PoC

Related by shared AI tags and CWE weakness class. Browse the full archive.