CVE-2026-102138 | Kiteworks Core up to 9.5.0 Connector server-side request forgery

September 30, 2026 Yanac

A vulnerability classified as problematic has been found in Kiteworks Core up to 9.5.0. Impacted is an unknown function of the component Connector. The manipulation leads to server-side request forgery.

This vulnerability is traded as CVE-2026-102138. It is possible to initiate the attack remotely. There is no exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More