Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Kiteworks — Vulnerabilities & Security Advisories 24

Browse all 24 CVE security advisories affecting Kiteworks. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Kiteworks provides a secure file transfer and content collaboration platform for enterprises handling sensitive data. Historically, vulnerabilities have included remote code execution, cross-site scripting, and privilege escalation flaws, often stemming from input validation failures and access control weaknesses. The platform has faced multiple security incidents, including a 2023 breach exposing customer data due to an unpatched vulnerability. With 15 CVEs recorded, Kiteworks has demonstrated recurring issues in secure coding practices, particularly in web application components and authentication mechanisms. Organizations implementing Kiteworks should prioritize timely patching and harden configurations against common attack vectors targeting enterprise file sharing systems.

Found 11 results / 24Clear Filters
CVE IDTitleCVSSSeverityPublished
CVE-2026-24782 Kiteworks Secure Data Forms has a SQL Injection vulnerability — Secure Data FormsCWE-89 7.6 High2026-06-01
CVE-2026-24761 Kiteworks Secure Data Forms is vulnerable to Authorization Bypass Through User-Controlled Key — Secure Data FormsCWE-639 3.7 Low2026-06-01
CVE-2026-24756 Kiteworks Secure Data Forms is vulnerable to Authorization Bypass Through User-Controlled Key — Secure Data FormsCWE-639 4.3 Medium2026-06-01
CVE-2026-24755 Kiteworks Secure Data Forms is vulnerable to Authorization Bypass Through User-Controlled Key — Secure Data FormsCWE-639 5.4 Medium2026-06-01
CVE-2026-24753 Kiteworks Secure Data Forms is vulnerable to Authorization Bypass Through User-Controlled Key — Secure Data FormsCWE-639 6.5 Medium2026-06-01
CVE-2026-24752 Kiteworks Secure Data Forms Vulnerable to Cross-site Scripting — Secure Data FormsCWE-79 8.2 High2026-06-01
CVE-2026-24751 Kiteworks Secure Data Forms Vulnerable to Cross-site Scripting — Secure Data FormsCWE-79 8.2 High2026-06-01
CVE-2026-23638 Kiteworks Secure Data Forms is vulnerable to Authorization Bypass Through User-Controlled Key — Secure Data FormsCWE-639 6.5 Medium2026-06-01
CVE-2026-23636 Kiteworks Secure Data Forms is vulnerable to an Unrestricted Upload of File with Dangerous Type — Secure Data FormsCWE-434 5.5 Medium2026-03-25
CVE-2026-23635 Kiteworks Secure Data Forms has a potential Unprotected Transport of Credentials — Secure Data FormsCWE-523 6.5 Medium2026-03-25
CVE-2026-24750 Kiteworks Secure Data Forms vulnerable to Cross-site Scripting — Secure Data FormsCWE-79 7.6 High2026-03-25

This page lists every published CVE security advisory associated with Kiteworks. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.