CVE-2026-102150
HighCVSS 7.2Exploitation Probability (EPSS)
Low risk15th percentile - higher than 15% of all known CVEs
Summary
A function in the Kiteworks Advanced Forms component was reachable without authentication. An unauthenticated attacker could potentially use it to carry out a limited set of internal service operations on the Kiteworks platform; it did not permit access to user accounts, stored files, or form submissions.
Risk Assessment
An unauthenticated attacker can perform unauthorized internal operations, potentially compromising platform integrity or confidentiality, though the scope is limited.
Recommendation
Restrict access to the Advanced Forms component or enforce authentication for all functions to block unauthorized access.
Other vulnerabilities in Kiteworks Advanced Forms
Original NVD description (English source)
A function in the Kiteworks Advanced Forms component was reachable without authentication. An unauthenticated attacker could potentially use it to carry out a limited set of internal service operations on the Kiteworks platform; it did not permit access to user accounts, stored files, or form submissions.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS