ZeroDay Findings
Sign inSign up

Findings

CVE-2026-23514

Kiteworks is a private data network (PDN).

Published Mar 25, 2026 · updated Jun 17, 2026 · accellion kiteworks

Kiteworks is a private data network (PDN). Versions 9.2.0 and 9.2.1 of Kiteworks Core have an access control vulnerability that allows authenticated users to access unauthorized content. Upgrade Kiteworks Core to version 9.2.2 or later to receive a patch.

Code

The project this record applies to. Exploit listings stay in References.

Timeline

Detection, updates, and resolution for this record.

  1. Mar 25, 2026 · NIST NVD

    Detected

    Kiteworks is a private data network (PDN). Versions 9.2.0 and 9.2.1 of Kiteworks Core have an access control vulnerability that allows authenticated users to access unauthorized content. Upgrade Kiteworks Core to version 9.2.2 or later to receive a patch.

  2. Jun 17, 2026 · NIST NVD

    Updated

    Kiteworks is a private data network (PDN). Versions 9.2.0 and 9.2.1 of Kiteworks Core have an access control vulnerability that allows authenticated users to access unauthorized content. Upgrade Kiteworks Core to version 9.2.2 or later to receive a patch.

Affected

  • cpe accellion/kiteworks9.2.0
  • cpe accellion/kiteworks9.2.1

Sources

  • CVE.orgVulnerability recordCVE-2026-23514

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-23514

    Kiteworks is a private data network (PDN). Versions 9.2.0 and 9.2.1 of Kiteworks Core have an access control vulnerability that allows authenticated users to access unauthorized content. Upgrade Kiteworks Core to version 9.2.2 or later to receive a patch.

    nvd.nist.gov

References