Unrated severityNVD Advisory· Published Mar 25, 2026· Updated Mar 25, 2026
Kiteworks Secure Data Forms has a potential Unprotected Transport of Credentials
CVE-2026-23635
Description
Kiteworks is a private data network (PDN). In Kiteworks Secure Data Forms prior to version 9.2.1, a misconfiguration of the security attributes could potentially lead to Unprotected Transport of Credentials under certain circumstances. Upgrade Kiteworks to version 9.2.1 or later to receive a patch.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2<=9.2.1+ 1 more
- (no CPE)range: <=9.2.1
- (no CPE)range: < 9.2.1
Patches
Vulnerability mechanics
References
1- github.com/kiteworks/security-advisories/security/advisories/GHSA-9hw2-6qp4-3v8fmitrex_refsource_CONFIRM
News mentions
0No linked articles in our index yet.