PT-2026-27781 · Kiteworks · Kiteworks

Publicado 2026-03-25 · Atualizado 2026-03-26 · CVE-2026-23514

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Kiteworks versions 9.2.0 through 9.2.1

Description Kiteworks Core has an access control issue that permits authenticated users to access content they are not authorized to view. The software is a private data network (PDN).

Recommendations Upgrade Kiteworks Core to version 9.2.2 or later.

Correção

Enumeração de Fraquezas

CWE-282

Identificadores relacionados

CVE-2026-23514

Produtos afetados

Kiteworks

Referências · 6

• https://github.com/kiteworks/security-advisories/security/advisories/GHSA-5gqr-cpr6-wvm5 · Aviso do Fabricante
• https://twitter.com/cyberbivash/status/2036854238710550733 · Publicação no Twitter
• https://twitter.com/CveFindCom/status/2036846290605072528 · Publicação no Twitter
• https://twitter.com/CVEarity/status/2037058252492751180 · Publicação no Twitter
• https://twitter.com/TheHackerWire/status/2036971653998268713 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2026-23514 · Nota de Segurança