<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: kiteworks-security-advisories</title><description>Every new CVE for kiteworks-security-advisories.</description><link>https://agentprime.io/</link><item><title>CVE-2026-24754: Kiteworks Secure Data Forms Vulnerable to Cross-site Scripting</title><link>https://agentprime.io/advisories/CVE-2026-24754/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-24754/</guid><description>CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 01 Jun 2026 21:46:56 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-28272: Kiteworks Email Protection Gateway has a Cross-site Scripting vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-28272/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-28272/</guid><description>CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 27 Feb 2026 20:22:59 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-28271: Kiteworks Core is vulnerable to Server-Side Request Forgery (SSRF)</title><link>https://agentprime.io/advisories/CVE-2026-28271/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-28271/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 27 Feb 2026 20:21:12 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-28270: Kiteworks Core has an Unrestricted Upload of File with Dangerous Type</title><link>https://agentprime.io/advisories/CVE-2026-28270/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-28270/</guid><description>CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 27 Feb 2026 20:19:54 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-28269: Kiteworks Core has an OS Command Injection</title><link>https://agentprime.io/advisories/CVE-2026-28269/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-28269/</guid><description>CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 26 Feb 2026 22:52:26 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-53939: Kiteworks Core is vulnerable to Improper Input Validation</title><link>https://agentprime.io/advisories/CVE-2025-53939/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-53939/</guid><description>CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 29 Nov 2025 02:25:46 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-53900: Kiteworks MFT has a Privilege Defined With Unsafe Actions</title><link>https://agentprime.io/advisories/CVE-2025-53900/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-53900/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 29 Nov 2025 02:25:34 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-53899: Kiteworks MFT is vulnerable to an Incorrectly Specified Destination in a Communication Channel</title><link>https://agentprime.io/advisories/CVE-2025-53899/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-53899/</guid><description>CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 29 Nov 2025 02:25:23 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-53897: Kiteworks MFT has a Cross-Site Request Forgery (CSRF) vulnerability</title><link>https://agentprime.io/advisories/CVE-2025-53897/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-53897/</guid><description>CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 29 Nov 2025 02:24:36 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-53896: Kiteworks MFT is vulnerable to Insufficient Session Expiration</title><link>https://agentprime.io/advisories/CVE-2025-53896/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-53896/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 29 Nov 2025 02:24:18 GMT</pubDate><category>CVE</category></item></channel></rss>