CVE-2026-24782
Medium
Elevated severity or exploit probability.
CVSS base
7.6
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L
EPSS — probability of exploitation (30 days)
0.7%
49.8th percentile
CISA KEV
Not listed
Weakness / dates
CWE-89
Published 2026-06-01 · modified 2026-07-22
Description
Kiteworks is a private data network (PDN). Prior to version 9.3.0,ultiple SQL Injection vulnerabilities in Kiteworks Secure Data Forms could be exploited by an authenticated attacker with the FormBuilder role to retrieve information on or modify other users' form definitions and some global configuration parameters. Upgrade Kiteworks to version 9.3.0 or later to receive a patch.