CVE-2026-102147

Name of the Vulnerable Software and Affected Versions Kiteworks Core (affected versions not specified)

Description A stored cross-site scripting (XSS) weakness allows an unauthenticated attacker to store crafted content. This content executes arbitrary JavaScript within the authenticated session of an administrator viewing the affected page, potentially granting the attacker full administrative control, including the ability to create new administrative accounts.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.