PT-2026-103539 · Kiteworks · Kiteworks Core
CVSS v3.1
8.1
High
| Vector | AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Kiteworks Core versions prior to 9.5.0
Description
A deserialization weakness exists where crafted data can be deserialized unsafely, potentially leading to remote code execution on the appliance. Deserialization is the process of converting a data format (like JSON or XML) back into an object that a program can use. This issue requires an attacker to first influence the affected data to be exploitable.
Recommendations
Update Kiteworks Core to version 9.5.0 or later.
Fix
RCE
Deserialization of Untrusted Data
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Kiteworks Core