Authentication Bypass Vulnerability in Kiteworks Advanced Forms
CVE-2026-102150

7.2HIGH

Key Information:

Vendor

Kiteworks

Status
Secure Data Forms
Vendor
CVE Published:
30 September 2026

What is CVE-2026-102150?

The Kiteworks Advanced Forms component contains a vulnerability that allows unauthenticated access to a specific function. This issue enables an attacker to perform a limited range of internal service operations within the Kiteworks platform. However, the security flaw does not grant access to user accounts, stored files, or form submissions, limiting its impact. Users are advised to apply any available updates to secure their Kiteworks deployments.

Affected Version(s)

Secure Data Forms 9.3.0 < 9.5.1

Secure Data Forms 9.5.1

References

https://github.com/kiteworks/security-advisories/security...
https://raw.githubusercontent.com/cisagov/CSAF/develop/cs...
third-party-advisory

CVSS V3.1

Score:
7.2
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.