Unrated severityNVD Advisory· Published Mar 25, 2026· Updated Mar 25, 2026
Kiteworks Secure Data Forms has a potential Unprotected Transport of Credentials
CVE-2026-23635
Description
Kiteworks is a private data network (PDN). In Kiteworks Secure Data Forms prior to version 9.2.1, a misconfiguration of the security attributes could potentially lead to Unprotected Transport of Credentials under certain circumstances. Upgrade Kiteworks to version 9.2.1 or later to receive a patch.
Affected products
2<=9.2.1+ 1 more
- (no CPE)range: <=9.2.1
- (no CPE)range: < 9.2.1
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- github.com/kiteworks/security-advisories/security/advisories/GHSA-9hw2-6qp4-3v8fmitrex_refsource_CONFIRM
News mentions
0No linked articles in our index yet.