All CVEs — page 371 of 631

The complete archive, 25 per page, newest first. 15775 records. Search instead.

• MEDIUM 5.4CVE-2026-102134public exploit available2026-09-30
• MEDIUM 6.6CVE-2026-102133public exploit available2026-09-30
• HIGH 7.2CVE-2026-102132public exploit available2026-09-30
• HIGH 7.2CVE-2026-102131public exploit available2026-09-30
• HIGH 7.2CVE-2026-102130public exploit available2026-09-30
• HIGH 7.2CVE-2026-102129public exploit available2026-09-30
• HIGH 7.5CVE-2026-102128public exploit available2026-09-30

  The Kiteworks Email Protection Gateway has a flawed authentication mechanism that allows unauthenticated attackers to impersonate users and create platform accounts without proper verification. This creates a critical risk of unauthorized account access and privilege escalation.

• HIGH 7CVE-2026-102127public exploit available2026-09-30
• HIGH 8.1CVE-2026-102126public exploit available2026-09-30

  A stored cross-site scripting (XSS) vulnerability allows a low-privileged administrator to inject JavaScript, potentially escalating to full administrative control.

• HIGH 8.8CVE-2026-102125public exploit available2026-09-30

  This flaw allows code running within a sandbox to escape its confinement, potentially enabling an attacker to read, modify, or disrupt the service with the privileges of the service account.

• MEDIUM 6.5CVE-2026-102124public exploit available2026-09-30
• HIGH 7.4CVE-2026-102123public exploit available2026-09-30
• MEDIUM 4.3CVE-2026-102122public exploit available2026-09-30
• HIGH 8.6CVE-2026-102121public exploit available2026-09-30

  The flaw allows unauthorized access to form owner's profile and deployment settings, exposing sensitive information.

• HIGH 8.8CVE-2026-102120public exploit available2026-09-30

  This vulnerability allows an attacker with code execution on one node to escalate privileges and run commands with elevated permissions on another node in the same Kiteworks cluster, leading to full control over the cluster.

• HIGH 7.2CVE-2026-102119public exploit available2026-09-30
• HIGH 7.8CVE-2026-102118public exploit available2026-09-30

  This vulnerability allows a low-privileged user to escalate to root privileges, posing a significant risk to the system's security.

• HIGH 7.2CVE-2026-102117public exploit available2026-09-30
• HIGH 7.2CVE-2026-102116public exploit available2026-09-30
• CRITICAL 9.8CVE-2026-102115public exploit available2026-09-30

  The flaw in Kiteworks Core allows unauthenticated attackers to reset a user's password by exploiting a parameter validation issue, potentially gaining full access to the account, including administrative privileges.

• HIGH 7.2CVE-2026-102114public exploit available2026-09-30
• HIGH 7.8CVE-2026-102113public exploit available2026-09-30

  This vulnerability allows an attacker with code execution privileges on a backend service account to escalate to root, enabling them to run arbitrary commands with the highest system privileges.

• HIGH 7.8CVE-2026-102112public exploit available2026-09-30

  This vulnerability allows an attacker with code execution privileges on a backend service account to escalate to root and execute arbitrary commands with the highest privileges, posing a significant risk to the system's security.

• MEDIUM 4.9CVE-2026-102111public exploit available2026-09-30
• MEDIUM 5.9CVE-2026-102110public exploit available2026-09-30