CVE-2026-28270 | kiteworks up to 9.1.x Configuration unrestricted upload

February 27, 2026 Yanac

A vulnerability marked as critical has been reported in kiteworks up to 9.1.x. This vulnerability affects unknown code of the component Configuration Handler. Performing a manipulation results in unrestricted upload.

This vulnerability is cataloged as CVE-2026-28270. It is possible to initiate the attack remotely. There is no exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More