2026

On deployments where the remote-support capability is licensed and enabled, an authenticated System Administrator who al

-A weakness could have allowed an authenticated Kiteworks Email Protection Gateway administrator to write a file outside

Kiteworks Core did not correctly validate a parameter submitted to the password reset workflow. An unauthenticated attac

A command injection vulnerability in Kiteworks could allow a high-privileged authenticated administrator to execute arbi

A privilege escalation vulnerability in Kiteworks could allow an attacker who has already obtained code execution as an

A privilege escalation vulnerability in Kiteworks could allow an attacker who has already obtained code execution as an

Kiteworks did not enforce the maximum permitted value for a configurable security-policy setting. An authenticated admin

An endpoint used during initial appliance setup did not require authentication and did not correctly enforce its intende

A SQL injection vulnerability existed in Kiteworks Secure Data Forms, where a value derived from the authenticated user'

An authenticated administrator of Kiteworks Email Protection Gateway could submit a crafted serialized object to a clust

Kiteworks Core contains a business logic flaw in a Kiteworks file-request feature allowed an authenticated user to send

Improper authentication in a Kiteworks Email Protection Gateway administrative service. An administrative service in Kit

Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Server-Side Request Forgery (SSRF). A server-si

Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Server-Side Request Forgery (SSRF). A server-si

Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Server-Side Request Forgery (SSRF). A server-si

Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Server-Side Request Forgery (SSRF). A server-si

Kiteworks Core before version 9.5.0 is vulnerable to Deserialization of Untrusted Data. A deserialization weakness in Ki

Kiteworks Core before version 9.5.0 is vulnerable to Stored Cross-Site Scripting. A stored cross-site scripting (XSS) we

Kiteworks Core before version 9.5.0 is vulnerable to Arbitrary File Write. An improper restriction of a user-supplied fi

Kiteworks Core before version 9.5.0 is vulnerable to SQL Injection. A stored SQL injection vulnerability in a Kiteworks

Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Remote Code Execution. Kiteworks Email Protecti

Kiteworks Core before version 9.5.0 is vulnerable to OS Command Injection that allows an authenticated administrator to

Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Server-Side Request Forgery. Kiteworks Email Pr

Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to Unsafe Reflection and does not sufficiently res

Kiteworks Core before version 9.5.0 is vulnerable to Improper Privilege Management and does not correctly enforce restri

Kiteworks Core before version 9.5.0 is vulnerable to Stored Cross-site Scripting (XSS) that could allow an authenticated

Kiteworks Secure Data Forms before version 9.5.0 is vulnerable to Server-Side Request Forgery that could allow an unauth

Kiteworks Core before version 9.5.1 is vulnerable to Content Injection. A URL parameter in the PDF viewer was insufficie

Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to a path traversal weakness in an administrative

iperf3 3.21 (esnet/iperf) contains a remote, unauthenticated heap use-after-free: the server's per-test watchdog server_

Inspur Haiyue HCM Cloud contains an arbitrary file read vulnerability in the /api/model_report/file/download endpoint th

Yonyou U8 CRM before V16.5 and V18 contains an arbitrary file read vulnerability in /ajax/getemaildata.php that allows u

iDocView contains a server-side request forgery vulnerability in its /doc/upload endpoint that allows remote unauthentic

Improperly stored passwords in the config file in Itron MV-90 xi 3.0 allows attackers to decode the passwords and passwo

In ldapd in OpenBSD 7.8 before errata 057 and 7.9 before errata 021, delegated BSD authentication results are correlated

A weakness has been identified in garycourt uri-js up to 4.4.1. This affects the function URI.parse of the file src/sche

pypdf is a free and open-source pure-python PDF library. Prior to 6.18.0, a crafted PDF containing indirect-object ident

pypdf is a free and open-source pure-python PDF library. Prior to 6.17.0, a crafted PDF can provide unusually large Roma

piscina is a node.js worker pool implementation. Prior to 4.9.4, 5.3.2, and 6.0.0-rc.5, Piscina stores ThreadPool.option

Mako is a template library written in Python. Prior to 1.4.2, on Windows, TemplateLookup.get_template() in mako/lookup.p

basic-ftp is an FTP client for Node.js. Prior to 6.2.1, Client.list() can be forced by a malicious or compromised FTP se

ZeroClaw versions before 0.8.5 built with plugins-wasm feature contain a path traversal vulnerability in plugin installa

OpenClaw Windows Node before 2026.7.1 contains an incomplete environment-variable sanitizer in system.run that fails to

OpenClaw Windows Node through 2026.9.4 contains a server-side request forgery vulnerability in the canvas.present capabi

OpenClaw Windows Node before 2026.7.1 contains an incomplete validation vulnerability in system.execApprovals.set that a

OpenClaw Windows Node before 2026.7.1 contains an allocation of resources without limits vulnerability in the gateway We

OpenClaw Windows Node before 2026.7.1 contains an incorrect authorization vulnerability in the system.run exec-approval

OpenClaw Windows Node before 2026.7.1-3 contains a missing authorization vulnerability in NodeService capture handlers t

Contributor PHP Object Injection in Schema & Structured Data for WP & AMP <= 1.66 versions.

Unauthenticated Cross Site Scripting (XSS) in Photonic Gallery & Lightbox for Flickr, SmugMug & Others <= 3.36 versions.