CVE-2026-102101

8.1 Élevée

Publiée le 30/09/2026 à 23:16 · Modifiée le 07/10/2026 à 15:25 · Analysée par le NVD · Source : 9119a7d8-5eab-497f-8521-727c672e3725

Description

Kiteworks Core before version 9.5.0 is vulnerable to Deserialization of Untrusted Data. A deserialization weakness in Kiteworks Core could, under certain conditions, allow crafted data to be deserialized unsafely, potentially resulting in remote code execution on the appliance. Exploitation depends on an attacker first being able to influence the affected data, so this issue is not exploitable on its own.

Traduire en français

Produits concernés

Kiteworks Core
Accellion kiteworks

Scores CVSS

Version	Score	Source	Vecteur
3.1	8.1 Élevée	9119a7d8-5eab-497f-8521-727c672e3725	`CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H`

Faiblesses (CWE)

CWE-502

Références

https://github.com/kiteworks/security-advisories/security/advisories/GHSA-x5hx-fgrp-prvf Vendor Advisory
https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/VA/white/2026/va-26-274-01.json Broken Link

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories