Medium severity5.9NVD Advisory· Published Feb 26, 2026· Updated Jun 17, 2026

CVE-2026-28269

Description

Kiteworks is a private data network (PDN). Prior to version 9.2.0, avulnerability in Kiteworks command execution functionality allows authenticated users to redirect command output to arbitrary file locations. This could be exploited to overwrite critical system files and gain elevated access. Version 9.2.0 contains a patch.

Affected products

Accellion/Kiteworks
cpe:2.3:a:accellion:kiteworks:*:*:*:*:*:*:*:*
Range: <9.2.0
Kiteworks/Kiteworksllm-fuzzy
Range: <9.2.0
Kiteworks/Security Advisoriescpe-rescue
Range: < 9.2.0

Patches

Vulnerability mechanics

References

github.com/kiteworks/security-advisories/security/advisories/GHSA-6j64-6fpp-9453nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.384
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000