Kiteworks Core Improper Validation of Specified Quantity in Input
Kiteworks did not enforce the maximum permitted value for a configurable security-policy setting. An authenticated administrator could set this value outside its intended range so that the associated control never activated, while the control continued to appear enabled in the administrative interface and audit log, allowing it to be silently rendered ineffective.
CVE-2026-102111
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: cve:CVE-2026-102111
Core
Source reference: /containers/cna/affected/0/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"vendor": "Kiteworks",
"product": "Core",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "9.5.0",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "9.5.0"
}
],
"defaultStatus": "unknown"
}
]- Related CVEs
- CVE-2026-102111
Source reference:
/cveMetadata/cveId
Publisher severity
medium
Source reference: /containers/cna/metrics
- Event
- #5146 · Revision 1
- Added to Heist Feed
- Publisher date