PT-2026-27781 · Kiteworks · Kiteworks

Published 2026-03-25 · Updated 2026-03-26 · CVE-2026-23514

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Kiteworks versions 9.2.0 through 9.2.1

Description Kiteworks Core has an access control issue that permits authenticated users to access content they are not authorized to view. The software is a private data network (PDN).

Recommendations Upgrade Kiteworks Core to version 9.2.2 or later.

Fix

Weakness Enumeration

CWE-282

Related Identifiers

CVE-2026-23514

Affected Products

Kiteworks

References · 6

• https://github.com/kiteworks/security-advisories/security/advisories/GHSA-5gqr-cpr6-wvm5 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-23514 · Security Note
• https://twitter.com/cyberbivash/status/2036854238710550733 · Twitter Post
• https://twitter.com/CveFindCom/status/2036846290605072528 · Twitter Post
• https://twitter.com/CVEarity/status/2037058252492751180 · Twitter Post
• https://twitter.com/TheHackerWire/status/2036971653998268713 · Twitter Post