CVE-2025-53899
High · 7.2CVSS
7.2
EPSS
0.9%
Published
Nov 29, 2025
CISA due date
—
The record
Kiteworks MFT is vulnerable to an Incorrectly Specified Destination in a Communication Channel
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-72506 VoiceTra provided by National Institute of Information and Communications Technology… CWE-941
- CVE-2026-69246 Guzzle is an extensible PHP HTTP client. CWE-941
- CVE-2026-40118 UDP Console provided by Arcserve contains an incorrectly specified destination in a… CWE-941
- CVE-2025-69515 An issue in JXL 9 Inch Car Android Double Din Player Android v12.0 allows attackers to… CWE-941
- CVE-2024-29415 The ip package through 2.0.1 for Node.js might allow SSRF because some IP addresses (such… CWE-941