{"schema_version":1,"title":"Kiteworks vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 10 vulnerabilities in Kiteworks: 0 in the last 7 days and 0 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-24782, was published on 1 June 2026. 2 technologies have a page of their own.","url":"https://junglewise.ai/threats/vendors/kiteworks","json_url":"https://junglewise.ai/threats/vendors/kiteworks.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/vendors/kiteworks","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"vendor","counts":{"high":4,"all_time":10,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":0,"last_90_days":0,"last_365_days":10},"latest":[{"cve":"CVE-2026-24782","cvss":7.6,"slug":"cve-2026-24782-kiteworks-secure-data-forms-sql-injection","title":"Kiteworks Secure Data Forms SQL injection","severity":"high","exploited":false,"published_at":"2026-06-01T23:16:21.093+00:00","url":"https://junglewise.ai/threats/cve-2026-24782-kiteworks-secure-data-forms-sql-injection"},{"cve":"CVE-2026-24761","cvss":3.7,"slug":"cve-2026-24761-kiteworks-secure-data-forms-idor-in-metadata-access","title":"Kiteworks Secure Data Forms IDOR in metadata access","severity":"low","exploited":false,"published_at":"2026-06-01T23:16:20.96+00:00","url":"https://junglewise.ai/threats/cve-2026-24761-kiteworks-secure-data-forms-idor-in-metadata-access"},{"cve":"CVE-2026-24756","cvss":4.3,"slug":"cve-2026-24756-kiteworks-secure-data-forms-idor-in-form-submissions","title":"Kiteworks Secure Data Forms IDOR in form submissions","severity":"medium","exploited":false,"published_at":"2026-06-01T23:16:20.827+00:00","url":"https://junglewise.ai/threats/cve-2026-24756-kiteworks-secure-data-forms-idor-in-form-submissions"},{"cve":"CVE-2026-24755","cvss":5.4,"slug":"cve-2026-24755-kiteworks-secure-data-forms-idor-in-collaborator-permissions","title":"Kiteworks Secure Data Forms IDOR in collaborator permissions","severity":"medium","exploited":false,"published_at":"2026-06-01T23:16:20.677+00:00","url":"https://junglewise.ai/threats/cve-2026-24755-kiteworks-secure-data-forms-idor-in-collaborator-permissions"},{"cve":"CVE-2026-24754","cvss":5.4,"slug":"cve-2026-24754-kiteworks-secure-data-forms-stored-xss-in-thank-you-page","title":"Kiteworks Secure Data Forms stored XSS in Thank You Page configuration","severity":"medium","exploited":false,"published_at":"2026-06-01T23:16:20.54+00:00","url":"https://junglewise.ai/threats/cve-2026-24754-kiteworks-secure-data-forms-stored-xss-in-thank-you-page"},{"cve":"CVE-2026-24753","cvss":6.5,"slug":"cve-2026-24753-kiteworks-secure-data-forms-idor-in-resource-management","title":"Kiteworks Secure Data Forms IDOR in resource management","severity":"medium","exploited":false,"published_at":"2026-06-01T23:16:20.39+00:00","url":"https://junglewise.ai/threats/cve-2026-24753-kiteworks-secure-data-forms-idor-in-resource-management"},{"cve":"CVE-2026-24752","cvss":8.2,"slug":"cve-2026-24752-kiteworks-secure-data-forms-reflected-xss-in-logging-module","title":"Kiteworks Secure Data Forms reflected XSS in logging module","severity":"high","exploited":false,"published_at":"2026-06-01T23:16:20.213+00:00","url":"https://junglewise.ai/threats/cve-2026-24752-kiteworks-secure-data-forms-reflected-xss-in-logging-module"},{"cve":"CVE-2026-24751","cvss":8.2,"slug":"cve-2026-24751-kiteworks-secure-data-forms-reflected-xss","title":"Kiteworks Secure Data Forms reflected XSS","severity":"high","exploited":false,"published_at":"2026-06-01T21:16:26.95+00:00","url":"https://junglewise.ai/threats/cve-2026-24751-kiteworks-secure-data-forms-reflected-xss"},{"cve":"CVE-2026-23638","cvss":6.5,"slug":"cve-2026-23638-kiteworks-secure-data-forms-idor-in-approval-flow-configurations","title":"Kiteworks Secure Data Forms IDOR in approval flow configurations","severity":"medium","exploited":false,"published_at":"2026-06-01T19:16:22.14+00:00","url":"https://junglewise.ai/threats/cve-2026-23638-kiteworks-secure-data-forms-idor-in-approval-flow-configurations"},{"cve":"CVE-2020-37247","cvss":7.8,"slug":"cve-2020-37247-kite-kiteservice-unquoted-service-path-privilege-escalation","title":"Kite KiteService unquoted service path privilege escalation","severity":"high","exploited":false,"published_at":"2026-05-16T16:16:21.123+00:00","url":"https://junglewise.ai/threats/cve-2020-37247-kite-kiteservice-unquoted-service-path-privilege-escalation"}],"vendor":{"hub":true,"name":"Kiteworks","slug":"kiteworks","homepage":"https://www.kiteworks.com/","description":"Kiteworks (formerly Accellion) provides a secure file sharing and governance platform for sensitive content communications.","url":"https://junglewise.ai/threats/vendors/kiteworks"},"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"most_severe":[{"cve":"CVE-2026-24752","cvss":8.2,"slug":"cve-2026-24752-kiteworks-secure-data-forms-reflected-xss-in-logging-module","title":"Kiteworks Secure Data Forms reflected XSS in logging module","severity":"high","exploited":false,"published_at":"2026-06-01T23:16:20.213+00:00","url":"https://junglewise.ai/threats/cve-2026-24752-kiteworks-secure-data-forms-reflected-xss-in-logging-module"},{"cve":"CVE-2026-24751","cvss":8.2,"slug":"cve-2026-24751-kiteworks-secure-data-forms-reflected-xss","title":"Kiteworks Secure Data Forms reflected XSS","severity":"high","exploited":false,"published_at":"2026-06-01T21:16:26.95+00:00","url":"https://junglewise.ai/threats/cve-2026-24751-kiteworks-secure-data-forms-reflected-xss"},{"cve":"CVE-2020-37247","cvss":7.8,"slug":"cve-2020-37247-kite-kiteservice-unquoted-service-path-privilege-escalation","title":"Kite KiteService unquoted service path privilege escalation","severity":"high","exploited":false,"published_at":"2026-05-16T16:16:21.123+00:00","url":"https://junglewise.ai/threats/cve-2020-37247-kite-kiteservice-unquoted-service-path-privilege-escalation"},{"cve":"CVE-2026-24782","cvss":7.6,"slug":"cve-2026-24782-kiteworks-secure-data-forms-sql-injection","title":"Kiteworks Secure Data Forms SQL injection","severity":"high","exploited":false,"published_at":"2026-06-01T23:16:21.093+00:00","url":"https://junglewise.ai/threats/cve-2026-24782-kiteworks-secure-data-forms-sql-injection"},{"cve":"CVE-2026-24753","cvss":6.5,"slug":"cve-2026-24753-kiteworks-secure-data-forms-idor-in-resource-management","title":"Kiteworks Secure Data Forms IDOR in resource management","severity":"medium","exploited":false,"published_at":"2026-06-01T23:16:20.39+00:00","url":"https://junglewise.ai/threats/cve-2026-24753-kiteworks-secure-data-forms-idor-in-resource-management"},{"cve":"CVE-2026-23638","cvss":6.5,"slug":"cve-2026-23638-kiteworks-secure-data-forms-idor-in-approval-flow-configurations","title":"Kiteworks Secure Data Forms IDOR in approval flow configurations","severity":"medium","exploited":false,"published_at":"2026-06-01T19:16:22.14+00:00","url":"https://junglewise.ai/threats/cve-2026-23638-kiteworks-secure-data-forms-idor-in-approval-flow-configurations"},{"cve":"CVE-2026-24755","cvss":5.4,"slug":"cve-2026-24755-kiteworks-secure-data-forms-idor-in-collaborator-permissions","title":"Kiteworks Secure Data Forms IDOR in collaborator permissions","severity":"medium","exploited":false,"published_at":"2026-06-01T23:16:20.677+00:00","url":"https://junglewise.ai/threats/cve-2026-24755-kiteworks-secure-data-forms-idor-in-collaborator-permissions"},{"cve":"CVE-2026-24754","cvss":5.4,"slug":"cve-2026-24754-kiteworks-secure-data-forms-stored-xss-in-thank-you-page","title":"Kiteworks Secure Data Forms stored XSS in Thank You Page configuration","severity":"medium","exploited":false,"published_at":"2026-06-01T23:16:20.54+00:00","url":"https://junglewise.ai/threats/cve-2026-24754-kiteworks-secure-data-forms-stored-xss-in-thank-you-page"},{"cve":"CVE-2026-24756","cvss":4.3,"slug":"cve-2026-24756-kiteworks-secure-data-forms-idor-in-form-submissions","title":"Kiteworks Secure Data Forms IDOR in form submissions","severity":"medium","exploited":false,"published_at":"2026-06-01T23:16:20.827+00:00","url":"https://junglewise.ai/threats/cve-2026-24756-kiteworks-secure-data-forms-idor-in-form-submissions"},{"cve":"CVE-2026-24761","cvss":3.7,"slug":"cve-2026-24761-kiteworks-secure-data-forms-idor-in-metadata-access","title":"Kiteworks Secure Data Forms IDOR in metadata access","severity":"low","exploited":false,"published_at":"2026-06-01T23:16:20.96+00:00","url":"https://junglewise.ai/threats/cve-2026-24761-kiteworks-secure-data-forms-idor-in-metadata-access"}],"generated_at":"2026-09-26T09:11:00.170868+00:00","technologies":[{"name":"Kiteworks Secure Data Forms","slug":"secure-data-forms","vulnerabilities":9,"url":"https://junglewise.ai/threats/technologies/secure-data-forms"},{"name":"Kiteworks Kite","slug":"kite","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/kite"}]}