PT-2026-27785 · Kiteworks · Kiteworks

CVE-2026-24750 · Publicado 2026-03-25 · Atualizado 2026-03-30

Positive Technologies (AI Summary)

CVSS v3.1

7.6

Alta

Vetor base

AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L

Name of the Vulnerable Software and Affected Versions Kiteworks versions prior to 9.2.1

Description Kiteworks is a private data network (PDN). In Kiteworks Secure Data Forms, an authenticated attacker could exploit an Improper Neutralization of Input During Web Page Generation, resulting in Stored Cross-Site Scripting (XSS) when modifying forms. The issue occurs due to insufficient input validation during web page generation.

Recommendations Upgrade Kiteworks to version 9.2.1 or later.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2026-24750

Produtos afetados

Kiteworks

Referências · 4

• https://github.com/kiteworks/security-advisories/security/advisories/GHSA-rfwm-2hq6-h84g · Aviso do Fabricante
• https://twitter.com/infoflowcloud/status/2038620206990262758 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2026-24750 · Nota de Segurança
• https://twitter.com/CVEnew/status/2038618165769298091 · Publicação no Twitter