Is CVE-2026-102147 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-102147 being exploited in the wild.

How severe is CVE-2026-102147?

Critical severity, with a CVSS score of 9.3, published 30 September 2026.

Is there a fix for CVE-2026-102147?

A patch was published on 2026-09-30: Version 9.5.1 and later Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-102147 attacked?

It is attacked over the network.

Am I affected by CVE-2026-102147?

Check whether you run Kiteworks Core at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-102147: Kiteworks Core stored cross-site scripting in administrative interface

CVE-2026-102147 · Severity: critical · CVSS 9.3 · Published 2026-09-30

Kiteworks Core is a secure file sharing and collaboration platform used by enterprises to manage sensitive data. An unauthenticated attacker can inject malicious JavaScript code that gets stored and executes when administrators view affected pages, allowing the attacker to create new admin accounts and take full control of the system. This vulnerability requires an attacker to trick an administrator into viewing a compromised page, but once executed, enables complete system compromise.

Technologies: Kiteworks Core. Vendors: Kiteworks.

Quick answers

Is CVE-2026-102147 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-102147 being exploited in the wild.
How severe is CVE-2026-102147?: Critical severity, with a CVSS score of 9.3, published 30 September 2026.
Which products and versions are affected?: Kiteworks Core before 9.5.1.
Is there a fix for CVE-2026-102147?: A patch was published on 2026-09-30: Version 9.5.1 and later Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-102147 attacked?: It is attacked over the network.
Am I affected by CVE-2026-102147?: Check whether you run Kiteworks Core at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A stored cross-site scripting (XSS) weakness in Kiteworks Core allows unauthenticated attackers to inject arbitrary JavaScript via user-controllable input that is not properly sanitized before being rendered in web pages served to other users. The vulnerability can be exploited through a network vector with low complexity and no privileges required, but user interaction is needed (administrator must view the malicious page). Successful exploitation enables arbitrary JavaScript execution in an administrator's authenticated session, leading to administrative account creation and full system takeover. The vulnerability is patched in version 9.5.1 and later.

Affected products

Kiteworks Core before 9.5.1

Timeline

2026-09-30: disclosed
2026-09-30: patched: Version 9.5.1 and later

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.