agentprime: kiteworks-coreEvery new CVE for kiteworks-core.https://agentprime.io/CVE-2026-102107: Kiteworks Core user impersonation in a file-request featurehttps://agentprime.io/advisories/CVE-2026-102107/https://agentprime.io/advisories/CVE-2026-102107/CVSS 4.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 30 Sep 2026 20:24:29 GMTCVECVE-2026-102110: Missing authentication on a Kiteworks appliance setup functionhttps://agentprime.io/advisories/CVE-2026-102110/https://agentprime.io/advisories/CVE-2026-102110/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 30 Sep 2026 20:21:42 GMTCVECVE-2026-102111: Kiteworks Core Improper Validation of Specified Quantity in Inputhttps://agentprime.io/advisories/CVE-2026-102111/https://agentprime.io/advisories/CVE-2026-102111/CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 30 Sep 2026 20:21:15 GMTCVECVE-2026-102112: Kiteworks Core Local Privilege Escalationhttps://agentprime.io/advisories/CVE-2026-102112/https://agentprime.io/advisories/CVE-2026-102112/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 30 Sep 2026 20:20:59 GMTCVECVE-2026-102113: Kiteworks Core Local Privilege Escalationhttps://agentprime.io/advisories/CVE-2026-102113/https://agentprime.io/advisories/CVE-2026-102113/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 30 Sep 2026 20:20:35 GMTCVECVE-2026-102114: Kiteworks Core OS Command Injectionhttps://agentprime.io/advisories/CVE-2026-102114/https://agentprime.io/advisories/CVE-2026-102114/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 30 Sep 2026 20:20:18 GMTCVECVE-2026-102115: Kiteworks Core Authentication Bypass in the Password Reset Workflowhttps://agentprime.io/advisories/CVE-2026-102115/https://agentprime.io/advisories/CVE-2026-102115/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 30 Sep 2026 20:19:55 GMTCVEcriticalCVE-2026-102117: Kiteworks Core Remote Code Executionhttps://agentprime.io/advisories/CVE-2026-102117/https://agentprime.io/advisories/CVE-2026-102117/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 30 Sep 2026 20:19:02 GMTCVECVE-2026-102118: Kiteworks Core before version 9.5.0 is vulnerable to Local Privilege Escalationhttps://agentprime.io/advisories/CVE-2026-102118/https://agentprime.io/advisories/CVE-2026-102118/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 30 Sep 2026 20:18:21 GMTCVECVE-2026-102120: Kiteworks Core OS Command Injectionhttps://agentprime.io/advisories/CVE-2026-102120/https://agentprime.io/advisories/CVE-2026-102120/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 30 Sep 2026 20:17:48 GMTCVECVE-2026-102122: Kiteworks Core Incorrect Authorizationhttps://agentprime.io/advisories/CVE-2026-102122/https://agentprime.io/advisories/CVE-2026-102122/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 30 Sep 2026 20:16:24 GMTCVECVE-2026-102123: Kiteworks Core Path Traversalhttps://agentprime.io/advisories/CVE-2026-102123/https://agentprime.io/advisories/CVE-2026-102123/CVSS 7.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 30 Sep 2026 20:16:01 GMTCVECVE-2026-102124: Kiteworks Core Missing Authentication for Critical Functionhttps://agentprime.io/advisories/CVE-2026-102124/https://agentprime.io/advisories/CVE-2026-102124/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 30 Sep 2026 20:15:38 GMTCVECVE-2026-102125: Kiteworks Core Sandbox Escapehttps://agentprime.io/advisories/CVE-2026-102125/https://agentprime.io/advisories/CVE-2026-102125/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 30 Sep 2026 20:15:25 GMTCVECVE-2026-102126: Kiteworks Core Stored Cross-site Scripting (XSS)https://agentprime.io/advisories/CVE-2026-102126/https://agentprime.io/advisories/CVE-2026-102126/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 30 Sep 2026 20:15:09 GMTCVECVE-2026-102129: Kiteworks Core Incorrect Privilege Assignmenthttps://agentprime.io/advisories/CVE-2026-102129/https://agentprime.io/advisories/CVE-2026-102129/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 30 Sep 2026 20:14:13 GMTCVECVE-2026-102132: Kiteworks Core Privilege Escalation through Improper Access Controlhttps://agentprime.io/advisories/CVE-2026-102132/https://agentprime.io/advisories/CVE-2026-102132/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 30 Sep 2026 20:13:28 GMTCVECVE-2026-102133: Kiteworks Core Arbitrary File Write through Command Injectionhttps://agentprime.io/advisories/CVE-2026-102133/https://agentprime.io/advisories/CVE-2026-102133/CVSS 6.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 30 Sep 2026 20:13:09 GMTCVECVE-2026-102134: Kiteworks Core Unprotected Alternate Channelhttps://agentprime.io/advisories/CVE-2026-102134/https://agentprime.io/advisories/CVE-2026-102134/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 30 Sep 2026 20:12:39 GMTCVECVE-2026-102136: Kiteworks Core Command Execution through Configuration Injectionhttps://agentprime.io/advisories/CVE-2026-102136/https://agentprime.io/advisories/CVE-2026-102136/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 30 Sep 2026 20:12:07 GMTCVECVE-2026-102137: Kiteworks Core Unrestricted Upload of File with Dangerous Typehttps://agentprime.io/advisories/CVE-2026-102137/https://agentprime.io/advisories/CVE-2026-102137/CVSS 4.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 30 Sep 2026 20:11:52 GMTCVECVE-2026-102138: Kiteworks Core Server-Side Request Forgery (SSRF)https://agentprime.io/advisories/CVE-2026-102138/https://agentprime.io/advisories/CVE-2026-102138/CVSS 3.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 30 Sep 2026 20:11:32 GMTCVECVE-2026-102101: Kiteworks Core deserialization of untrusted datahttps://agentprime.io/advisories/CVE-2026-102101/https://agentprime.io/advisories/CVE-2026-102101/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 30 Sep 2026 20:11:24 GMTCVECVE-2026-102140: Kiteworks Core Insufficient Verification of Data Authenticityhttps://agentprime.io/advisories/CVE-2026-102140/https://agentprime.io/advisories/CVE-2026-102140/CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 30 Sep 2026 20:11:07 GMTCVECVE-2026-102141: Kiteworks Core Privilege Escalation through External Control of File Name or Pathhttps://agentprime.io/advisories/CVE-2026-102141/https://agentprime.io/advisories/CVE-2026-102141/CVSS 6.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 30 Sep 2026 20:10:55 GMTCVECVE-2026-102142: Kiteworks Core Remote Code Execution through Server-Side Template Injectionhttps://agentprime.io/advisories/CVE-2026-102142/https://agentprime.io/advisories/CVE-2026-102142/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 30 Sep 2026 20:10:30 GMTCVECVE-2026-102100: Kiteworks Core stored XSShttps://agentprime.io/advisories/CVE-2026-102100/https://agentprime.io/advisories/CVE-2026-102100/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 30 Sep 2026 20:10:05 GMTCVECVE-2026-102147: Kiteworks Core Administrative Account Takeover through Stored Cross-site Scripting (XSS)https://agentprime.io/advisories/CVE-2026-102147/https://agentprime.io/advisories/CVE-2026-102147/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 30 Sep 2026 20:09:08 GMTCVEcriticalCVE-2026-102145: Kiteworks Core Server-Side Request Forgery through CRLF Injectionhttps://agentprime.io/advisories/CVE-2026-102145/https://agentprime.io/advisories/CVE-2026-102145/CVSS 6.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 30 Sep 2026 20:08:34 GMTCVECVE-2026-102096: Kiteworks Core OS command injectionhttps://agentprime.io/advisories/CVE-2026-102096/https://agentprime.io/advisories/CVE-2026-102096/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 30 Sep 2026 20:07:35 GMTCVECVE-2026-102099: Kiteworks Core arbitrary file writehttps://agentprime.io/advisories/CVE-2026-102099/https://agentprime.io/advisories/CVE-2026-102099/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 30 Sep 2026 20:07:29 GMTCVECVE-2026-102093: Kiteworks Core improper privilege managementhttps://agentprime.io/advisories/CVE-2026-102093/https://agentprime.io/advisories/CVE-2026-102093/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 30 Sep 2026 20:06:49 GMTCVECVE-2026-102092: Kiteworks Core stored XSShttps://agentprime.io/advisories/CVE-2026-102092/https://agentprime.io/advisories/CVE-2026-102092/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 30 Sep 2026 20:06:03 GMTCVECVE-2026-102090: Kiteworks Core content injectionhttps://agentprime.io/advisories/CVE-2026-102090/https://agentprime.io/advisories/CVE-2026-102090/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 30 Sep 2026 20:05:32 GMTCVECVE-2026-102098: Kiteworks Core SQL Injectionhttps://agentprime.io/advisories/CVE-2026-102098/https://agentprime.io/advisories/CVE-2026-102098/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 30 Sep 2026 20:05:28 GMTCVECVE-2026-23514: Kiteworks Core before 9.2.2 is vulnerable to Improper Ownership Managementhttps://agentprime.io/advisories/CVE-2026-23514/https://agentprime.io/advisories/CVE-2026-23514/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 25 Mar 2026 14:19:01 GMTCVE