CVE-2026-102101

Name of the Vulnerable Software and Affected Versions Kiteworks Core versions prior to 9.5.0

Description A deserialization weakness exists where crafted data can be deserialized unsafely, potentially leading to remote code execution on the appliance. Deserialization is the process of converting a data format (like JSON or XML) back into an object that a program can use. This issue requires an attacker to first influence the affected data to be exploitable.

Recommendations Update Kiteworks Core to version 9.5.0 or later.