Unrated severityNVD Advisory· Published Mar 25, 2026· Updated Mar 27, 2026
Kiteworks Secure Data Forms is vulnerable to an Unrestricted Upload of File with Dangerous Type
CVE-2026-23636
Description
Kiteworks is a private data network (PDN). In Kiteworks Secure Data Forms prior to version 9.2.1, the manager of a form could potentially exploit an Unrestricted Upload of File with Dangerous Type due to a missing validation. Upgrade Kiteworks to version 9.2.1 or later to receive a patch.
Affected products
2<9.2.1+ 1 more
- (no CPE)range: <9.2.1
- (no CPE)range: < 9.2.1
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- github.com/kiteworks/security-advisories/security/advisories/GHSA-cfv8-p3hq-8wmmmitrex_refsource_CONFIRM
News mentions
0No linked articles in our index yet.