Access Control

Every one of the 9 is a mark on the map. Named now: 1 to 9, most at risk first.

1. Kiteworks MFT has a Privilege Defined With Unsafe ActionsCVE-2025-53900kiteworks · CVSS 6.5 · 1.2% likely

   CWE-267

2. Kiteworks Core before 9.2.2 is vulnerable to Improper Ownership ManagementCVE-2026-23514kiteworks · CVSS 8.8 · 1.1% likely

   CWE-282

3. Kiteworks Core Privilege Escalation through Improper Access ControlCVE-2026-102132Kiteworks · CVSS 7.2 · 1.0% likely

   CWE-284

4. Kiteworks Core improper privilege managementCVE-2026-102093Kiteworks · CVSS 7.2 · 1.0% likely

   CWE-269

5. Kiteworks MFT is vulnerable to an Incorrectly Specified Destination in a Communication ChannelCVE-2025-53899kiteworks · CVSS 7.2 · 1.0% likely

   CWE-941

6. Kiteworks Core Incorrect Privilege AssignmentCVE-2026-102129Kiteworks · CVSS 7.2 · 0.8% likely

   CWE-266

7. Kiteworks Core Sandbox EscapeCVE-2026-102125Kiteworks · CVSS 8.8 · 0.4% likely

   CWE-653

8. Kiteworks Core Unprotected Alternate ChannelCVE-2026-102134Kiteworks · CVSS 5.4 · 0.2% likely

   CWE-420

9. Kiteworks Core Incorrect AuthorizationCVE-2026-102122Kiteworks · CVSS 4.3 · 0.2% likely

   CWE-863

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.