CVE-2026-102101 — Kiteworks Core deserialization of untrusted data
Kiteworks Core before version 9.5.0 is vulnerable to Deserialization of Untrusted Data. A deserialization weakness in Kiteworks Core could, under certain conditions, allow craft…
Published: 2026-09-30 · CVSS: 8.1 · CVSS 3.1
Kiteworks Core before version 9.5.0 is vulnerable to Deserialization of Untrusted Data. A deserialization weakness in Kiteworks Core could, under certain conditions, allow crafted data to be deserialized unsafely, potentially resulting in remote code execution on the appliance. Exploitation depends on an attacker first being able to influence the affected data, so this issue is not exploitable on its own.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7