CVE-2026-24750Disclosure(accellion / kiteworks)

LOWCVSS 5.4 · MEDIUM

Signal is active with 2 mentions in latest observed window

Immediate actions

Patch accellion kiteworks systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Kiteworks is a private data network (PDN). In Kiteworks Secure Data Forms prior to version 9.2.1, an authenticated attacker could exploit an Improper Neutralization of Input During Web Page Generation as Stored XSS when modifying forms. Upgrade Kiteworks to version 9.2.1 or later to receive a patch.

accellion CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://github.com/kiteworks/security-advisories/security/advisories/GHSA-rfwm-2hq6-h84g

Weakness type (CWE)

CWE-79

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

kiteworks

Threat summary

Patch or workaround signal is available
2 mentions across 1 observed day

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 2 signals
Disclosure: 2 classified signals
2 total mentions across 1 day

Affected systems

Vendors

accellion

Products

kiteworks

Deep dive

Activity timeline2 mentions / 1d

Signal classification1 categories

Disclosure

2100.0%

Referenced assets2 URLs

By indicator

Full discourse2 posts

Infoflowcloud@infoflowcloud194d
Disclosure
🚨*CVE* CVE-2026-24750 Kiteworks is a private data network (PDN). In Kiteworks Secure Data Forms prior to version 9.2.1, an authenticated attacker could exploit an Improper Neutralization o… https://www.cve.org/CVERecord?id=CVE-2026-24750 ----- Traducción: CVE-2026-24750 Kit… http://infoflow.cloud`
Post summary
The tweet briefly announces CVE-2026-24750 for Kiteworks, noting the affected component and vulnerability type, but provides no PoC, exploit, patch, or evidence of active exploitation.
0000031
62 followersView on X
CVE@CVEnew194d
Disclosure
CVE-2026-24750 Kiteworks is a private data network (PDN). In Kiteworks Secure Data Forms prior to version 9.2.1, an authenticated attacker could exploit an Improper Neutralization o… https://www.cve.org/CVERecord?id=CVE-2026-24750
Post summary
CVE-2026‑24750 describes an authentication‑based "Improper Neutralization" vulnerability in Kiteworks Secure Data Forms prior to version 9.2.1, with a patch available in that version; no PoC, exploit code, or evidence of active exploitation is reported.
00000637
56.8K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	accellion	kiteworks	-	-	-

Explore more

Back to dashboard accellion CVEs kiteworks vulnerabilities