CVE-2026-102150 — Kiteworks Secure Data Forms Missing Authentication for Critical Function
A function in the Kiteworks Advanced Forms component was reachable without authentication. An unauthenticated attacker could potentially use it to carry out a limited set of int…
Published: 2026-09-30 · CVSS: 7.2 · CVSS 3.1
A function in the Kiteworks Advanced Forms component was reachable without authentication. An unauthenticated attacker could potentially use it to carry out a limited set of internal service operations on the Kiteworks platform; it did not permit access to user accounts, stored files, or form submissions.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7