Kiteworks Secure Data Forms

4 known vulnerabilities in Kiteworks Secure Data Forms, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

  • CVE-2026-102150 CVSS 7.2 high A function in the Kiteworks Advanced Forms component was reachable without authentication. An unauthenticated attacker could potentially…
  • CVE-2026-102121 CVSS 8.6 high A form-rendering interface in the Advanced Forms component is reachable without authentication so that published forms can be displayed to…
  • CVE-2026-102109 CVSS 7.1 high A SQL injection vulnerability existed in Kiteworks Secure Data Forms, where a value derived from the authenticated user's stored account…
  • CVE-2026-102091 CVSS 7.5 high Kiteworks Secure Data Forms before version 9.5.0 is vulnerable to Server-Side Request Forgery that could allow an unauthenticated, remote…