CVE-2026-23635: Kiteworks Secure Data Forms has a potential Unprotected Transport of Credentials
Kiteworks is a private data network (PDN). In Kiteworks Secure Data Forms prior to version 9.2.1, a misconfiguration of the security attributes could potentially lead to Unprotected Transport of Credentials under certain circumstances. Upgrade Kiteworks to version 9.2.1 or later to receive a patch.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-23635?
CVE-2026-23635 is considered a high-severity vulnerability due to the potential for unprotected transport of credentials.
How do I fix CVE-2026-23635?
To fix CVE-2026-23635, upgrade Kiteworks Secure Data Forms to version 9.2.1 or later.
What causes CVE-2026-23635?
CVE-2026-23635 is caused by misconfiguration of security attributes that lead to unprotected transport of credentials.
Who is affected by CVE-2026-23635?
Users of Kiteworks Secure Data Forms prior to version 9.2.1 are affected by CVE-2026-23635.
What are the potential risks of CVE-2026-23635?
The potential risks of CVE-2026-23635 include exposure of sensitive user credentials to unauthorized parties.