CVE-2026-102142 — Kiteworks Core Remote Code Execution through Server-Side Template Injection
A system notification template on the Kiteworks appliance was rendered by a template engine that evaluated expressions contained in the stored template body. An authenticated Sy…
Published: 2026-09-30 · CVSS: 7.2 · CVSS 3.1
A system notification template on the Kiteworks appliance was rendered by a template engine that evaluated expressions contained in the stored template body. An authenticated System Administrator could potentially store a crafted template that executed operating-system commands on the appliance when the notification was next sent.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7