Unrated severityNVD Advisory· Published Feb 27, 2026· Updated Mar 3, 2026
Kiteworks Email Protection Gateway has a Cross-site Scripting vulnerability
CVE-2026-28272
Description
Kiteworks is a private data network (PDN). Prior to version 9.2.0, a vulnerability in Kiteworks Email Protection Gateway allows authenticated administrators to inject malicious scripts through a configuration interface. The stored script executes when users interact with the affected user interface. Version 9.2.0 contains a patch for the issue.
Affected products
2- Range: <9.2.0
- kiteworks/security-advisoriesv5Range: < 9.2.0
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- github.com/kiteworks/security-advisories/security/advisories/GHSA-7hxj-ch78-xqgrmitrex_refsource_CONFIRM
News mentions
0No linked articles in our index yet.