CVE-2026-102124 — Kiteworks Core Missing Authentication for Critical Function
A Kiteworks appliance setup interface did not enforce authentication once the appliance had completed initial configuration. An unauthenticated attacker with network access to t…
Published: 2026-09-30 · CVSS: 6.5 · CVSS 3.1
A Kiteworks appliance setup interface did not enforce authentication once the appliance had completed initial configuration. An unauthenticated attacker with network access to the appliance could read and modify a limited set of setup records, including a contact name and email address captured during initial configuration.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7