How many Kiteworks security-advisories CVEs are in CISA KEV?

None of Kiteworks security-advisories's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of Kiteworks security-advisories are affected?

3 distinct Kiteworks security-advisories versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Kiteworks security-advisories CVEs?

Kiteworks security-advisories's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-267 (Privilege Defined With Unsafe Actions), CWE-352 (Cross-Site Request Forgery (CSRF)), CWE-434 (Unrestricted Upload of File with Dangerous Type).

What is the average severity of Kiteworks security-advisories CVEs?

The average CVSS base score across Kiteworks security-advisories's scored CVEs is 7.6.

RadicalNotion.AI

Log in Create an account

Kiteworks

10 CVEs

Kiteworks security-advisories Vulnerabilities

Name: Kiteworks security-advisories vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for security-advisories by Kiteworks.

10

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

7.6

Avg CVSS

2025–2026

Last updated June 1, 2026

Overview

Kiteworks security-advisories has 10 published CVE records since 2025, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 7.6.

Severity and exploitation

How the CVSS severity of Kiteworks security-advisories's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High7

Medium3

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of Kiteworks security-advisories's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No Kiteworks security-advisories CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every Kiteworks security-advisories version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 9.1.05 CVEs
< 9.2.04 CVEs
< 9.3.01 CVE

Find a version

10 CVEs

Sort

Kiteworks Secure Data Forms Vulnerable to Cross-site Scripting
CVE-2026-24754
Patch
CWE-79
Medium · CVSS 5.4
EPSS 0.1% (3th pct)2026-06-01
Kiteworks Email Protection Gateway has a Cross-site Scripting vulnerability
CVE-2026-28272
Patch
CWE-79
High · CVSS 8.1
EPSS 0.4% (37th pct)2026-02-27
Kiteworks Core is vulnerable to Server-Side Request Forgery (SSRF)
CVE-2026-28271
Patch
CWE-918
Medium · CVSS 6.5
EPSS 0.6% (45th pct)2026-02-27
Kiteworks Core has an Unrestricted Upload of File with Dangerous Type
CVE-2026-28270
Patch
CWE-434
High · CVSS 7.2
EPSS 2.2% (82th pct)2026-02-27
Kiteworks Core has an OS Command Injection
CVE-2026-28269
Patch
CWE-78
High · CVSS 8.8
EPSS 3.0% (87th pct)2026-02-26
Kiteworks Core is vulnerable to Improper Input Validation
CVE-2025-53939
Patch
CWE-20
High · CVSS 8.8
EPSS 0.7% (54th pct)2025-11-29
Kiteworks MFT has a Privilege Defined With Unsafe Actions
CVE-2025-53900
Patch
CWE-267
High · CVSS 8.8
EPSS 1.1% (66th pct)2025-11-29
Kiteworks MFT is vulnerable to an Incorrectly Specified Destination in a Communication Channel
CVE-2025-53899
Patch
CWE-941
High · CVSS 7.2
EPSS 0.9% (60th pct)2025-11-29
Kiteworks MFT has a Cross-Site Request Forgery (CSRF) vulnerability
CVE-2025-53897
Patch
CWE-352
Medium · CVSS 6.8
EPSS 0.2% (9th pct)2025-11-29
Kiteworks MFT is vulnerable to Insufficient Session Expiration
CVE-2025-53896
Patch
CWE-613
High · CVSS 8.1
EPSS 0.2% (9th pct)2025-11-29

Common weakness types

The CWE weakness categories most often found in Kiteworks security-advisories CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many Kiteworks security-advisories CVEs were published each year.

2025

5

2026

5

Other Kiteworks products

Browse vulnerabilities for other products by Kiteworks.

Core36 CVEs Email Protection Gateway22 CVEs Secure Data Forms15 CVEs totemomail2 CVEs Kiteworks Email Protection Gateway1 CVEs owncloud1 CVEs

All Kiteworks vulnerabilities

Frequently asked questions

Common questions about Kiteworks security-advisories vulnerabilities.

How many CVEs does Kiteworks security-advisories have?: Kiteworks security-advisories has 10 published CVE records since 2025.
How many Kiteworks security-advisories CVEs are in CISA KEV?: None of Kiteworks security-advisories's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Kiteworks security-advisories vulnerabilities?: No Kiteworks security-advisories CVEs currently have a tracked public exploit in this dataset.
Which versions of Kiteworks security-advisories are affected?: 3 distinct Kiteworks security-advisories versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Kiteworks security-advisories CVEs?: Kiteworks security-advisories's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-267 (Privilege Defined With Unsafe Actions), CWE-352 (Cross-Site Request Forgery (CSRF)), CWE-434 (Unrestricted Upload of File with Dangerous Type).
What is the average severity of Kiteworks security-advisories CVEs?: The average CVSS base score across Kiteworks security-advisories's scored CVEs is 7.6.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Kiteworks security-advisories vulnerabilities

Get an alert for each new Kiteworks security-advisories CVE, with AI-written analysis and remediation steps.

Create an account See pricing