CVE-2026-24751

HIGH · 8.2 CVSS Gepubliceerd: 01-06-2026 CWE-79

Beschrijving

Kiteworks is a private data network (PDN). Prior to version 9.3.0, a reflected XSS vulnerability in Kiteworks Secure Data Forms could allow an external attacker to trick a user into executing arbitrary JavaScript code. Upgrade Kiteworks to version 9.3.0 or later to receive a patch.

Vendors

Accellion

Affected products

Kiteworks

References

github.com