CVE-2026-102091

Name of the Vulnerable Software and Affected Versions Kiteworks Secure Data Forms versions prior to 9.5.0

Description An issue exists that allows an unauthenticated remote attacker to perform Server-Side Request Forgery (SSRF), a technique where the attacker induces the server to make requests to an unintended location. This could enable the attacker to force the server to issue arbitrary outbound network requests and read the responses, potentially granting access to internal-only services or other network-restricted resources.

Recommendations Update Kiteworks Secure Data Forms to version 9.5.0 or later.