2026

An administrative import function in Kiteworks Core did not verify that the requesting administrator was entitled to cre

Kiteworks Email Protection Gateway rejected certain configuration settings, but its validation did not recognize every f

Kiteworks Email Protection Gateway did not sufficiently validate the content of an uploaded backup, and allowed an admin

A user-provisioning interface in Kiteworks Core did not verify that the requesting administrator was entitled to grant t

An identity-verification weakness in Kiteworks Email Protection Gateway allowed the gateway to act on the Kiteworks plat

An XML parser used by Kiteworks Email Protection Gateway did not restrict external entity references. Where an optional,

A stored cross-site scripting (XSS) weakness in Kiteworks Core could allow an administrator holding only a single, narro

The sandbox that isolates document conversion on a Kiteworks appliance did not fully confine the code running inside it.

A Kiteworks appliance setup interface did not confine a user-supplied file path to its intended directory, which could a

A form-rendering interface in the Advanced Forms component is reachable without authentication so that published forms c

A privilege escalation vulnerability in Kiteworks could have allowed an attacker who had already obtained code execution

A path traversal weakness in an optional, non-default administrative feature allowed an authenticated administrator to m

A local privilege escalation vulnerability in Kiteworks could have allowed an attacker with an existing shell under a lo

On deployments where the remote-support capability is licensed and enabled, an authenticated System Administrator who al

-A weakness could have allowed an authenticated Kiteworks Email Protection Gateway administrator to write a file outside

A command injection vulnerability in Kiteworks could allow a high-privileged authenticated administrator to execute arbi

A privilege escalation vulnerability in Kiteworks could allow an attacker who has already obtained code execution as an

A privilege escalation vulnerability in Kiteworks could allow an attacker who has already obtained code execution as an

A SQL injection vulnerability existed in Kiteworks Secure Data Forms, where a value derived from the authenticated user'

An authenticated administrator of Kiteworks Email Protection Gateway could submit a crafted serialized object to a clust

Kiteworks Core before version 9.5.0 is vulnerable to Deserialization of Untrusted Data. A deserialization weakness in Ki

Kiteworks Core before version 9.5.0 is vulnerable to Stored Cross-Site Scripting. A stored cross-site scripting (XSS) we

Kiteworks Core before version 9.5.0 is vulnerable to Arbitrary File Write. An improper restriction of a user-supplied fi

Kiteworks Core before version 9.5.0 is vulnerable to SQL Injection. A stored SQL injection vulnerability in a Kiteworks

Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Remote Code Execution. Kiteworks Email Protecti

Kiteworks Core before version 9.5.0 is vulnerable to OS Command Injection that allows an authenticated administrator to

Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Unsafe Reflection and does not sufficiently res

Kiteworks Core before version 9.5.0 is vulnerable to Improper Privilege Management and does not correctly enforce restri

Kiteworks Core before version 9.5.0 is vulnerable to Stored Cross-site Scripting (XSS) that could allow an authenticated

Kiteworks Secure Data Forms before version 9.5.0 is vulnerable to Server-Side Request Forgery that could allow an unauth

Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to a path traversal weakness in an administrative

Inspur Haiyue HCM Cloud contains an arbitrary file read vulnerability in the /api/model_report/file/download endpoint th

Yonyou U8 CRM before V16.5 and V18 contains an arbitrary file read vulnerability in /ajax/getemaildata.php that allows u

iDocView contains a server-side request forgery vulnerability in its /doc/upload endpoint that allows remote unauthentic

pypdf is a free and open-source pure-python PDF library. Prior to 6.18.0, a crafted PDF containing indirect-object ident

pypdf is a free and open-source pure-python PDF library. Prior to 6.17.0, a crafted PDF can provide unusually large Roma

ZeroClaw versions before 0.8.5 built with plugins-wasm feature contain a path traversal vulnerability in plugin installa

OpenClaw Windows Node before 2026.7.1 contains an incomplete environment-variable sanitizer in system.run that fails to

OpenClaw Windows Node before 2026.7.1 contains an incomplete validation vulnerability in system.execApprovals.set that a

OpenClaw Windows Node before 2026.7.1 contains an incorrect authorization vulnerability in the system.run exec-approval

Contributor PHP Object Injection in Schema & Structured Data for WP & AMP <= 1.66 versions.

Unauthenticated Cross Site Scripting (XSS) in Photonic Gallery & Lightbox for Flickr, SmugMug & Others <= 3.36 versions.

Editor PHP Object Injection in Page Builder by SiteOrigin <= 2.36.0 versions.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in VillaTheme CURCY w

Tugtainer is a self-hosted app for automating updates of Docker containers. Prior to version 1.31.3, when the OIDC login

Reachy Mini ISO for Wireless contains the necessary files to build a custom Raspberry Pi OS image for the Reachy Mini Wi

yii2-starter-kit through 4.2.0 fails to validate file types in the backend storage upload actions, allowing authenticate

Deno versions 2.7.0 through 2.9.7 on Windows contain a command injection vulnerability in node:child_process where shell

restbed through 5.0.0 accepts WebSocket frames with declared payload lengths up to 2^63 bytes and buffers the payload wi

restbed through 5.0.0 buffers HTTP request headers without enforcing a maximum size limit, allowing remote unauthenticat