CVE-2026-23636 — Kiteworks Secure Data Forms is vulnerable to an Unrestricted Upload of File with Dangerous Type

CVE-2026-23636

Kiteworks Secure Data Forms is vulnerable to an Unrestricted Upload of File with Dangerous Type PUBLISHED

Description (CNA)

Kiteworks is a private data network (PDN). In Kiteworks Secure Data Forms prior to version 9.2.1, the manager of a form could potentially exploit an Unrestricted Upload of File with Dangerous Type due to a missing validation. Upgrade Kiteworks to version 9.2.1 or later to receive a patch.

Affected (CNA)

Vendor / product	Versions
kiteworks / Secure Data Forms	affected < 9.2.1

CWE

CWE-434

References

https://github.com/kiteworks/security-advisories/security/advisories/GHSA-cfv8-p3hq-8wmm

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.