← Back to CVE search

CVE-2026-23635

Kiteworks Secure Data Forms

Description

Kiteworks is a private data network (PDN). In Kiteworks Secure Data Forms prior to version 9.2.1, a misconfiguration of the security attributes could potentially lead to Unprotected Transport of Credentials under certain circumstances. Upgrade Kiteworks to version 9.2.1 or later to receive a patch.

CVSS 6.5EPSS 0.317%Risk 0.67
View source
Published
2026-03-25 17:16:35
Affected versions
< 9.2.1
Type
Core software
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N