CVE-2026-102136

6.3 Moyenne

Publiée le 30/09/2026 à 23:17 · Modifiée le 13/10/2026 à 13:59 · Analysée par le NVD · Source : 9119a7d8-5eab-497f-8521-727c672e3725

Description

In multi-node deployments, an attacker who had already obtained code execution on one appliance node could submit a value through an internal cluster interface that was written into monitoring configuration on another node without sufficient validation, potentially allowing OS commands to be executed there. Execution was limited to an unprivileged service account on that node.

Traduire en français

Produits concernés

Kiteworks Core
Accellion kiteworks

Scores CVSS

Version	Score	Source	Vecteur
3.1	6.3 Moyenne	9119a7d8-5eab-497f-8521-727c672e3725	`CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L`

Faiblesses (CWE)

CWE-93

Références

https://github.com/kiteworks/security-advisories/security/advisories/GHSA-rpxx-jm93-w5j7 Vendor Advisory
https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/VA/white/2026/va-26-274-01.json Broken Link

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories