PT-2026-28067 · Kiteworks · Kiteworks

CVE-2026-23636 · Publicado 2026-03-25 · Atualizado 2026-03-25

Positive Technologies (AI Summary)

CVSS v3.1

7.2

Alta

Vetor base

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Kiteworks versions prior to 9.2.1

Description Kiteworks Secure Data Forms allows a form manager to potentially exploit an unrestricted upload of files with dangerous types due to missing validation. This occurs in versions prior to 9.2.1.

Recommendations Upgrade Kiteworks to version 9.2.1 or later.

Correção

Unrestricted File Upload

Enumeração de Fraquezas

CWE-434

Identificadores relacionados

CVE-2026-23636

Produtos afetados

Kiteworks

Referências · 3

• https://github.com/kiteworks/security-advisories/security/advisories/GHSA-cfv8-p3hq-8wmm · Aviso do Fabricante
• https://twitter.com/CVEnew/status/2036911829059068247 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2026-23636 · Nota de Segurança