poslední zpráva
SPOJENO AI
Kiteworks patches max severity code injection vulnerability
Secure file-sharing software company Kiteworks has released security updates to address 126 vulnerabilities, including a max-severity flaw affecting its Email Protection Gateway (EPG) security solution. [...]
Kiteworks NL CA US GB
CVE zmíněná v článku 1
Tohle CVE jsem vytáhl z širšího textu článku: CVE-2026-54154. Neukazuju u něj proto fakta z katalogů, a to preventivně, protože článek se na něj mohl jen odkazovat, třeba jako na starší kauzu.
Jak se o tom psalo 7
-
· NCSC-NL NL
NCSC-2026-0408 [1.00] [M/H] Kwetsbaarheden verholpen in Kiteworks
Kiteworks heeft meerdere kwetsbaarheden verholpen in de Kiteworks productlijn. De kwetsbaarheden in Kiteworks betreffen diverse componenten en functionaliteiten binnen de producten. - Geauthenticeerde beheerders kunnen onder andere misbruik maken van onvoldoende validatie in import- en exportfuncties, wat leidt tot het schrijven van bestanden op willekeurige locaties en het uitvoeren van arbitrary code. - Er zijn meerdere gevallen van privilege-escalatie waarbij gebruikers met beperkte rechten…
-
· Cyber Centre Kanada CA
Kiteworks security advisory (AV26-988)
Serial number: AV26-988 Date: October 1, 2026 As of September 30, 2026, Kiteworks is affected by vulnerabilities in the following products: Kiteworks Core Prior to 9.5.0 Prior to 9.5.1 Kiteworks Email Protection Gateway (EPG) Prior to 9.5.0 Prior to 9.5.1 Kiteworks Secure Data Forms (SDF) Prior to 9.5.0 Prior to 9.5.1 The Cyber Centre encourages users and administrators to review the provided web link and apply any necessary updates as they become available. Kiteworks Security Advisories
-
· BleepingComputer US nadpis události
Kiteworks patches max severity code injection vulnerability
Secure file-sharing software company Kiteworks has released security updates to address 126 vulnerabilities, including a max-severity flaw affecting its Email Protection Gateway (EPG) security solution. [...]
-
· BleepingComputer US
Kiteworks patches critical flaw, brings customer systems online
American tech company Kiteworks has lifted a precautionary advisory asking customers to shut down systems after patching a critical vulnerability. [...]
-
· BleepingComputer US
Kiteworks urges 6-hour server shutdown over potential zero-day attacks
Secure file-sharing software company Kiteworks is urging customers worldwide to temporarily shut down their servers on Saturday for a six-hour window after receiving threat intelligence warning of a potentially imminent cyberattack. [...]
-
· The Record US
Kiteworks urges customers to stop using platform after warning from federal intelligence agencies
Frank Balonis, CISO at Kiteworks, told Recorded Future News that the company “received credible threat intelligence from federal intelligence authorities indicating that a threat actor may attempt to target some Kiteworks systems for customers.”
-
· zachyceno · Sophos Threat Research GB
Kiteworks recommends server shutdown pending possible attack
Categories: Threat ResearchTags: advisory, Kiteworks