CVE-2026-102147Suited to automated attack · CISA
Kiteworks Core Administrative Account Takeover through Stored Cross-site Scripting (XSS)
CVSS score
9.3
EPSS probability
%0.5
Risk score
0.0
Published
18 d ago
Related Security News
Articles and analysis bulletins in which the press and security publications have covered this vulnerability:
No verified news item has been matched to this CVE yet.
Similar Vulnerabilities
7.2
CVE-2026-102096Kiteworks Core OS command injection
Patch status unknownEPSS %3
7.2
CVE-2026-102114Kiteworks Core OS Command Injection
Patch status unknownEPSS %3
7.2
CVE-2026-102097Kiteworks Email Protection Gateway remote code execution
Patch status unknownEPSS %2
7.2
CVE-2026-102099Kiteworks Core arbitrary file write
Patch status unknownEPSS %2
7.2
CVE-2026-102116Kiteworks Email Protection Gateway Path Traversal
Patch status unknownEPSS %2
7.2
CVE-2026-102089Kiteworks Email Protection Gateway path traversal
Patch status unknownEPSS %2
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-102147"