CVE-2026-102100

Name of the Vulnerable Software and Affected Versions Kiteworks Core versions prior to 9.5.0

Description A stored cross-site scripting (XSS) weakness allows an authenticated user to submit content that executes arbitrary JavaScript in the session of another user who views that content. This can be used to perform actions on behalf of the victim and may lead to account takeover, including accounts with higher privileges.

Recommendations Update Kiteworks Core to version 9.5.0 or later.