CVE-2026-24782

CVSS Score & Metrics

Base Score

7.6 / 10

Vector String

                                        CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L                                    

Vulnerability Description

Kiteworks is a private data network (PDN). Prior to version 9.3.0,ultiple SQL Injection vulnerabilities in Kiteworks Secure Data Forms could be exploited by an authenticated attacker with the FormBuilder role to retrieve information on or modify other users' form definitions and some global configuration parameters. Upgrade Kiteworks to version 9.3.0 or later to receive a patch.

Vulnerability Details

Published Date

June 01, 2026

Last Modified

June 03, 2026

CWE ID

CWE-89

Source

NVD

Vendor

kiteworks

Product

Secure Data Forms

External References

https://github.com/kiteworks/security-advisories/security/advisories/GHSA-849r-gm3r-4v5c

CVSS Score & Metrics

Vulnerability Description

Vulnerability Details

External References

Discussion (0)

Add Comment