CVE-2026-23514 — Kiteworks Core before 9.2.2 is vulnerable to Improper Ownership Management
Kiteworks is a private data network (PDN). Versions 9.2.0 and 9.2.1 of Kiteworks Core have an access control vulnerability that allows authenticated users to access unauthorized…
Published: 2026-03-25 · CVSS: 8.8 · CVSS 3.1
Kiteworks is a private data network (PDN). Versions 9.2.0 and 9.2.1 of Kiteworks Core have an access control vulnerability that allows authenticated users to access unauthorized content. Upgrade Kiteworks Core to version 9.2.2 or later to receive a patch.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7