CVE-2026-24750

5.4 mediumEPSS 0.2%

Medium (5.4) in accellion kiteworks. EPSS 0.2% chance of exploitation in the next 30 days.

Kiteworks is a private data network (PDN). In Kiteworks Secure Data Forms prior to version 9.2.1, an authenticated attacker could exploit an Improper Neutralization of Input During Web Page Generation as Stored XSS when modifying forms. Upgrade Kiteworks to version 9.2.1 or later to receive a patch.

Severity

CVSS 3.1

5.4 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 15% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2026-03-25
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

accellion:kiteworks

References

https://github.com/kiteworks/security-advisories/security/advisories/GHSA-rfwm-2hq6-h84g

Check your stack JSON