News & Sicurezza

CVE ID :CVE-2026-24755 Published : June 1, 2026, 11:16 p.m. | 1 hour, 16 minutes ago Description :Kiteworks is a private data network (PDN). Prior to version 9.3.0, an Insecure Direct Object Reference (IDOR) vulnerability in Kiteworks Secure Data Forms allows an authenticated user to modify permissions on resources belonging to other users due to insufficient authorization checks on resource ownership. Upgrade Kiteworks to version 9.3.0 or later to receive a patch. Severity: 5.4 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-24754 Published : June 1, 2026, 11:16 p.m. | 1 hour, 16 minutes ago Description :Kiteworks is a private data network (PDN). Prior to version 9.3.0, a stored XSS vulnerability in Kiteworks Secure Data Forms could allow an authenticated attacker to execute arbitrary JavaScript code in other users' sessions. Upgrade Kiteworks to version 9.3.0 or later to receive a patch. Severity: 5.4 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-24761 Published : June 1, 2026, 11:16 p.m. | 1 hour, 16 minutes ago Description :Kiteworks is a private data network (PDN). Prior to version 9.3.0, an Insecure Direct Object Reference (IDOR) vulnerability in Kiteworks Secure Data Forms allows an authenticated user to access metadata of resources belonging to other users due to insufficient authorization checks on resource ownership. Upgrade Kiteworks to version 9.3.0 or later to receive a patch. Severity: 3.7 | LOW Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Memory corruption while processing fastboot commands with improperly formatted input.

Cryptographic issue while processing partition table entries allows unauthorized modification of boot flow.

Memory corruption while processing fastboot commands with invalid input.

Cryptographic Issue while processing a specific partition which allows unauthorized write access to load a customized bootloader.

Memory corruption while processing fastboot OEM commands.

Memory Corruption when processing display command line information due to improper initialization of a variable.

CVE ID :CVE-2026-24091 Published : June 1, 2026, 11:16 p.m. | 1 hour, 16 minutes ago Description :Memory corruption while processing fastboot commands with improperly formatted input. Severity: 7.2 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-24088 Published : June 1, 2026, 11:16 p.m. | 1 hour, 16 minutes ago Description :Cryptographic Issue while processing a specific partition which allows unauthorized write access to load a customized bootloader. Severity: 8.2 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE ID :CVE-2026-24090 Published : June 1, 2026, 11:16 p.m. | 1 hour, 16 minutes ago Description :Cryptographic issue while processing partition table entries allows unauthorized modification of boot flow. Severity: 7.1 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...