CVE-2026-23514: Kiteworks Core before 9.2.2 is vulnerable to Improper Ownership Management
Published Mar 25, 2026
·Updated
Kiteworks is a private data network (PDN). Versions 9.2.0 and 9.2.1 of Kiteworks Core have an access control vulnerability that allows authenticated users to access unauthorized content. Upgrade Kiteworks Core to version 9.2.2 or later to receive a patch.
Affected Software
3 affected components
Kiteworks Kiteworks Core<9.2.2
Accellion Kiteworks=9.2.0
Accellion Kiteworks=9.2.1
Event History
Mar 25, 2026
CVE Published
via MITRE·02:19 PM
Data Sourced
via MITRE·02:19 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·03:16 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-23514?
CVE-2026-23514 has a high severity due to its access control vulnerability allowing unauthorized access to sensitive content.
2
How do I fix CVE-2026-23514?
To fix CVE-2026-23514, upgrade Kiteworks Core to version 9.2.2 or later.
3
Which versions of Kiteworks Core are affected by CVE-2026-23514?
Kiteworks Core versions 9.2.0 and 9.2.1 are affected by CVE-2026-23514.
4
What kind of vulnerability is CVE-2026-23514?
CVE-2026-23514 is classified as an Improper Ownership Management vulnerability.
5
Who is impacted by CVE-2026-23514?
Authenticated users of Kiteworks Core versions 9.2.0 and 9.2.1 may be impacted by CVE-2026-23514.