CVE-2026-102098

Name of the Vulnerable Software and Affected Versions Kiteworks Core versions prior to 9.5.0

Description A stored SQL injection exists within an administrative reporting feature. This issue allows an authenticated administrator to read sensitive data from the underlying database and potentially impact service availability. Exploitation requires an authenticated administrative account with access to the reporting function.

Recommendations Update Kiteworks Core to version 9.5.0 or later.