CVE-2026-28270
EUVD-2026-906527.02.2026, 21:16
Kiteworks is a private data network (PDN). Prior to version 9.2.0, a vulnerability in Kiteworks configuration allows uploading of arbitrary files without proper validation. Malicious administrators could exploit this to upload unauthorized file types to the system. Version 9.2.0 contains a patch for the issue.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| accellion | kiteworks | 𝑥 < 9.2.0 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration