Kiteworks Patches 78 Vulnerabilities, Including Critical Account Takeover Flaw

Kiteworks has disclosed and patched 78 security flaws across its Core platform, Email Protection Gateway, and forms products. Nine of these vulnerabilities are rated Critical, with the most severe being CVE-2026-102115 (CVSS 9.8), a password reset flaw that could lead to account takeover, including administrative privileges. Other critical bugs include server-side request forgery flaws and an admin login bypass. Version 9.5.1 fixes all identified issues, and no in-the-wild attacks have been confirmed.