File and Path Handling

Every one of the 13 is a mark on the map. Named now: 1 to 13, most at risk first.

1. Kiteworks Email Protection Gateway remote code executionCVE-2026-102097Kiteworks · CVSS 7.2 · 2.2% likely

   CWE-22

2. Kiteworks Core arbitrary file writeCVE-2026-102099Kiteworks · CVSS 7.2 · 2.0% likely

   CWE-22

3. Kiteworks Email Protection Gateway Path TraversalCVE-2026-102116Kiteworks · CVSS 7.2 · 2.0% likely

   CWE-22

4. Kiteworks Core has an Unrestricted Upload of File with Dangerous TypeCVE-2026-28270kiteworks · CVSS 4.9 · 1.8% likely

   CWE-434

5. Kiteworks Email Protection Gateway path traversalCVE-2026-102089Kiteworks · CVSS 7.2 · 1.5% likely

   CWE-22

6. Kiteworks Email Protection Gateway Path TraversalCVE-2026-102119Kiteworks · CVSS 7.2 · 1.4% likely

   CWE-22

7. Kiteworks Secure Data Forms is vulnerable to an Unrestricted Upload of File with Dangerous TypeCVE-2026-23636kiteworks · CVSS 5.5 · 1.0% likely

   CWE-434

8. Kiteworks Email Protection Gateway Arbitrary File Write through Server-Side Template InjectionCVE-2026-102146Kiteworks · CVSS 6.5 · 1.0% likely

   CWE-73

9. Kiteworks Core Path TraversalCVE-2026-102123Kiteworks · CVSS 7.4 · 1.0% likely

   CWE-22

10. Kiteworks Core before version 9.5.0 is vulnerable to Local Privilege EscalationCVE-2026-102118Kiteworks · CVSS 7.8 · 0.4% likely

    CWE-59

11. Kiteworks Core Local Privilege EscalationCVE-2026-102113Kiteworks · CVSS 7.8 · 0.4% likely

    CWE-59

12. Kiteworks Core Unrestricted Upload of File with Dangerous TypeCVE-2026-102137Kiteworks · CVSS 4.1 · 0.3% likely

    CWE-434

13. Kiteworks Core Privilege Escalation through External Control of File Name or PathCVE-2026-102141Kiteworks · CVSS 6.7 · 0.1% likely

    CWE-73

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.