CVE-2026-23514CWE-282

Kiteworks Core before 9.2.2 is vulnerable to Improper Ownership Management

High · published March 25, 2026

CVSS v3.1
8.8
EPSS
1%
Percentile
64.2
In the wild
Unconfirmed
What it is

Kiteworks is a private data network (PDN). Versions 9.2.0 and 9.2.1 of Kiteworks Core have an access control vulnerability that allows authenticated users to access unauthorized content. Upgrade Kiteworks Core to version 9.2.2 or later to receive a patch.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01058 · 64.2th percentile
Weakness
CWE-282 · Improper Ownership Management
Published
2026-03-25T14:19Z
EPSS history
Timeline
  • 25 MAR 14:19Z
    Kiteworks Core before 9.2.2 is vulnerable to Improper Ownership Management
    cvelistv5