CVE-2026-23514
High · 8.8CVSS
8.8
EPSS
1.1%
Published
Mar 25, 2026
CISA due date
—
The record
Kiteworks is a private data network (PDN). Versions 9.2.0 and 9.2.1 of Kiteworks Core have an access control vulnerability that allows authenticated users to access unauthorized content. Upgrade Kiteworks Core to version 9.2.2 or later to receive a patch.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-40214 In OpenStack Cyborg before 16.0.1, the Accelerator Request (ARQ) API does not enforce… CWE-282
- CVE-2026-3867 An improper ownership management vulnerability has been identified in Moxa’s Secure… CWE-282
- CVE-2025-67642 Jenkins HashiCorp Vault Plugin exposes system-scoped Vault credentials CWE-282