A
Vendor security profile4 actively exploited CVEs
accellion
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs79
Critical9
CISA KEV4
Public exploit4
Patch rate%6
Avg. CVSS7.2
12-month vulnerability rate
5
0
0
0
0
0
0
9
0
0
61
0
CVE KEV
CVE severity distribution
79toplam CVE
Critical9 (11%)
High41 (52%)
Medium24 (30%)
Low1 (1%)
Uncertain4 (5%)
Patch and exploitation view
%6
Verified patch
%5
CISA KEV
%5
Public exploit
5Patch available
0Partial
4Workaround
0Vendor: no patch
70Unknown
Latest vulnerabilities
9.1
CVE-2026-102105
Kiteworks Email Protection Gateway server-side request forgery
K
Patch status unknownEPSS %1
9.1
CVE-2026-102106
Kiteworks Email Protection Gateway improper authentication
K
Patch status unknownEPSS %1
4.6
CVE-2026-102107
Kiteworks Core user impersonation in a file-request feature
K
Patch status unknownEPSS %0
7.2
CVE-2026-102108
Kiteworks Email Protection Gateway deserialization of untrusted data
K
Patch status unknownEPSS %1
7.1
CVE-2026-102109
Kiteworks Secure Data Forms SQL injection
K
Patch status unknownEPSS %0
5.9
CVE-2026-102110
Missing authentication on a Kiteworks appliance setup function
K
Patch status unknownEPSS %0
4.9
CVE-2026-102111
Kiteworks Core Improper Validation of Specified Quantity in Input
K
Patch status unknownEPSS %0
7.8
CVE-2026-102112
Kiteworks Core Local Privilege Escalation
K
Patch status unknownEPSS %0
7.8
CVE-2026-102113
Kiteworks Core Local Privilege Escalation
K
Patch status unknownEPSS %0
7.2
CVE-2026-102114
Kiteworks Core OS Command Injection
K
Patch status unknownEPSS %3