CVE-2026-102091

7.5 Élevée

Publiée le 30/09/2026 à 23:16 · Modifiée le 08/10/2026 à 15:42 · Analysée par le NVD · Source : 9119a7d8-5eab-497f-8521-727c672e3725

Description

Kiteworks Secure Data Forms before version 9.5.0 is vulnerable to Server-Side Request Forgery that could allow an unauthenticated, remote attacker to make the server issue arbitrary outbound network requests and read back the responses. This could potentially be used to reach internal-only services or other network-restricted resources.

Traduire en français

Produits concernés

Kiteworks Secure Data Forms
Accellion kiteworks

Scores CVSS

Version	Score	Source	Vecteur
3.1	7.5 Élevée	9119a7d8-5eab-497f-8521-727c672e3725	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N`

Faiblesses (CWE)

CWE-918

Références

https://github.com/kiteworks/security-advisories/security/advisories/GHSA-m8mj-m4fv-jmrh Vendor Advisory
https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/VA/white/2026/va-26-274-01.json Broken Link

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories