CVE-2026-23635 — Kiteworks Secure Data Forms has a potential Unprotected Transport of Credentials

CVE-2026-23635

Kiteworks Secure Data Forms has a potential Unprotected Transport of Credentials PUBLISHED

Description (CNA)

Kiteworks is a private data network (PDN). In Kiteworks Secure Data Forms prior to version 9.2.1, a misconfiguration of the security attributes could potentially lead to Unprotected Transport of Credentials under certain circumstances. Upgrade Kiteworks to version 9.2.1 or later to receive a patch.

Affected (CNA)

Vendor / product	Versions
kiteworks / Secure Data Forms	affected < 9.2.1

CWE

CWE-523

References

https://github.com/kiteworks/security-advisories/security/advisories/GHSA-9hw2-6qp4-3v8f

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.