CVE Tools

Kiteworks

14 CVEs tracked since 2025. Since Nov 2025, none of them reached CISA KEV.

Kiteworks CVEs per month

Nov 2025 to Jun 2026. Point at a month, or focus the strip and use the arrow keys.
Kiteworks CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2025-1150
2025-12null or fewer
2026-01null or fewer
2026-02null or fewer
2026-03null or fewer
2026-04null or fewer
2026-05null or fewer
2026-0690

Products

The products that kept showing up in Kiteworks's monthly top three, with their CVEs summed over those months.

  1. Secure Data Forms81 month
  2. Security-advisories62 months

Latest CVEs

The 15 most recently published vulnerabilities affecting Kiteworks.

  1. CVE-2026-24782Kiteworks Secure Data Forms has a SQL Injection vulnerability7.6
  2. CVE-2026-24761Kiteworks Secure Data Forms is vulnerable to Authorization Bypass Through User-Controlled Key3.7
  3. CVE-2026-24756Kiteworks Secure Data Forms is vulnerable to Authorization Bypass Through User-Controlled Key4.3
  4. CVE-2026-24755Kiteworks Secure Data Forms is vulnerable to Authorization Bypass Through User-Controlled Key5.4
  5. CVE-2026-24754Kiteworks Secure Data Forms Vulnerable to Cross-site Scripting5.4
  6. CVE-2026-24753Kiteworks Secure Data Forms is vulnerable to Authorization Bypass Through User-Controlled Key6.5
  7. CVE-2026-24752Kiteworks Secure Data Forms Vulnerable to Cross-site Scripting8.2
  8. CVE-2026-24751Kiteworks Secure Data Forms Vulnerable to Cross-site Scripting8.2
  9. CVE-2026-23638Kiteworks Secure Data Forms is vulnerable to Authorization Bypass Through User-Controlled Key6.5
  10. CVE-2026-29092Kiteworks Email Protection Gateway has an Insufficient Session Expiration4.9
  11. CVE-2026-23636Kiteworks Secure Data Forms is vulnerable to an Unrestricted Upload of File with Dangerous Type5.5
  12. CVE-2026-23635Kiteworks Secure Data Forms has a potential Unprotected Transport of Credentials6.5
  13. CVE-2026-24750Kiteworks Secure Data Forms vulnerable to Cross-site Scripting7.6
  14. CVE-2026-23514Kiteworks Core before 9.2.2 is vulnerable to Improper Ownership Management8.8
  15. CVE-2026-28272Kiteworks Email Protection Gateway has a Cross-site Scripting vulnerability8.1

The record

Peak rank
#152 in Nov 2025
Busiest month shown
Jun 2026, 9 CVEs
Months with a KEV entry
0 since Nov 2025
Monthly snapshots
2 since 2025
Kiteworks's full record, month by month

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store