CVE-2026-102115 | Kiteworks up to 9.4.x Password Reset Workflow improper authentication

September 30, 2026 Yanac

A vulnerability was found in Kiteworks up to 9.4.x. It has been declared as critical. Affected by this issue is some unknown functionality of the component Password Reset Workflow. The manipulation results in improper authentication.

This vulnerability is identified as CVE-2026-102115. The attack can be executed remotely. There is not any exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More