News & Sicurezza

CVE ID :CVE-2026-25277 Published : June 1, 2026, 11:16 p.m. | 3 hours, 16 minutes ago Description :Memory corruption while using Strongbox due to buffer overflow. Severity: 8.8 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-24782 Published : June 1, 2026, 11:16 p.m. | 1 hour, 16 minutes ago Description :Kiteworks is a private data network (PDN). Prior to version 9.3.0,ultiple SQL Injection vulnerabilities in Kiteworks Secure Data Forms could be exploited by an authenticated attacker with the FormBuilder role to retrieve information on or modify other users' form definitions and some global configuration parameters. Upgrade Kiteworks to version 9.3.0 or later to receive a patch. Severity: 7.6 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-25258 Published : June 1, 2026, 11:16 p.m. | 1 hour, 16 minutes ago Description :Memory corruption while processing IOCTL calls for escape operations. Severity: 7.8 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-25276 Published : June 1, 2026, 11:16 p.m. | 3 hours, 16 minutes ago Description :Memory corruption while using Strongbox due to missing bounds check. Severity: 8.8 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-25260 Published : June 1, 2026, 11:16 p.m. | 3 hours, 16 minutes ago Description :Memory Corruption when accessing shared buffers without validation of concurrent user-mode input modifications. Severity: 7.8 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-25259 Published : June 1, 2026, 11:16 p.m. | 1 hour, 16 minutes ago Description :Memory corruption while processing multiple IOCTL command for escape operations. Severity: 7.8 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Memory Corruption when processing fastboot commands to set display mode.

CVE ID :CVE-2026-24752 Published : June 1, 2026, 11:16 p.m. | 1 hour, 16 minutes ago Description :Kiteworks is a private data network (PDN). Prior to version 9.3.0, a reflected XSS vulnerability in Kiteworks Secure Data Forms could allow an external attacker to trick a user into executing arbitrary JavaScript code. Upgrade Kiteworks to version 9.3.0 or later to receive a patch. Severity: 8.2 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-24756 Published : June 1, 2026, 11:16 p.m. | 1 hour, 16 minutes ago Description :Kiteworks is a private data network (PDN). Prior to version 9.3.0, an Insecure Direct Object Reference (IDOR) vulnerability in Kiteworks Secure Data Forms allows an authenticated user to modify resources belonging to other users due to insufficient authorization checks on resource ownership. Upgrade Kiteworks to version 9.3.0 or later to receive a patch. Severity: 4.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-24755 Published : June 1, 2026, 11:16 p.m. | 1 hour, 16 minutes ago Description :Kiteworks is a private data network (PDN). Prior to version 9.3.0, an Insecure Direct Object Reference (IDOR) vulnerability in Kiteworks Secure Data Forms allows an authenticated user to modify permissions on resources belonging to other users due to insufficient authorization checks on resource ownership. Upgrade Kiteworks to version 9.3.0 or later to receive a patch. Severity: 5.4 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-24754 Published : June 1, 2026, 11:16 p.m. | 1 hour, 16 minutes ago Description :Kiteworks is a private data network (PDN). Prior to version 9.3.0, a stored XSS vulnerability in Kiteworks Secure Data Forms could allow an authenticated attacker to execute arbitrary JavaScript code in other users' sessions. Upgrade Kiteworks to version 9.3.0 or later to receive a patch. Severity: 5.4 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-24753 Published : June 1, 2026, 11:16 p.m. | 1 hour, 16 minutes ago Description :Kiteworks is a private data network (PDN). Prior to version 9.3.0, an Insecure Direct Object Reference (IDOR) vulnerability in Kiteworks Secure Data Forms allows an authenticated user to modify resources belonging to other users due to insufficient authorization checks on resource ownership. Upgrade Kiteworks to version 9.3.0 or later to receive a patch. Severity: 6.5 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...