PT-2026-103539

CVE-2026-102101

Published

2026-09-30

Updated

2026-10-01

Description by

CVSS 3.1

8.1

High

MetricsAV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Kiteworks Core versions prior to 9.5.0

Description A deserialization weakness exists where crafted data can be deserialized unsafely, potentially leading to remote code execution on the appliance. Deserialization is the process of converting a data format (like JSON or XML) back into an object that a program can use. This issue requires an attacker to first influence the affected data to be exploitable.

Recommendations Update Kiteworks Core to version 9.5.0 or later.

Exploitability

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration