Kiteworks

www.kiteworks.com ↗
C
CAUTION
51
Total CVEs
36
Crit / High
15
Medium
88%
Unpatched
0%
Patched
7.3
Avg CVSS
0
CISA KEV
// Data sourced from NVD · CISA KEV · RHSA · GHSA · Debian · OSV · EPSS · Exploit-DB How we collect data →
// INTEL UPGRADE
Full Company Dossier — Coming Soon
Executive profiles, financial exposure, M&A risk, breach history & supply-chain threat mapping — all in one place.
OSINT FINANCIALS EXEC PROFILES BREACH DB
▸ CVE Trend by Year
▸ Patch Coverage
Patched
0%
Unpatched
88%
Under Review
12%
✓ 0 patched ✗ 45 unpatched ~ 6 under review
▸ Intelligence by Audience
PoC Available
4 / 20 shown
CISA KEV (Exploited)
0
Shodan Dorks
ssl:"kiteworks" port:443
org:"Kiteworks" http.status:200
Top EPSS (Exploitation Probability)
CVE-2026-102135 0.57% exploitation probability
CVE-2026-102144 0.50% exploitation probability
CVE-2026-102111 0.36% exploitation probability
CVE-2026-102139 0.35% exploitation probability
CVE-2026-102134 0.29% exploitation probability
Quick Facts for Reporting
Total CVEs tracked
51
Critical severity
9
Actively exploited (CISA)
0
Unpatched ratio
88%
Avg CVSS score
7.3
Security grade
C (CAUTION)
NVD Data Attribution
Source: NIST National Vulnerability Database (NVD) + GitHub Advisory Database.
Data aggregated by Valters IT Hub · valtersit.com
Last updated: 2026-10-14
Security Risk Score (for investors)
LOW
Vuln Volume
POOR
Patch Responsiveness
LOW
CISA Exposure
⚠ Not financial advice. Past security incidents do not guarantee future stock performance.
▸ Security News Google News
Kiteworks CISO: Why We Shut Down Systems Before Finding Vulnerability - TechTarget
TechTarget 1d ago
Kiteworks lifts advisory after precautionary warning for customers to shut down systems - Cybersecurity Dive
Cybersecurity Dive 2026-09-28
Kiteworks Urges Customers to Shut Down Systems for 9 Hours Over Possible Cyber Attack - The Hacker News
The Hacker News 2026-09-26
Kiteworks urges customers to shut down their servers amid ‘imminent’ threat of cyberattack - TechCrunch
TechCrunch 2026-09-25
Kiteworks & Citrix Incidents Show Challenges of Zero-Day Response - Dark Reading
Dark Reading 2026-10-02
Kiteworks Urges Server Shutdown, Finds Advanced Forms Vulnerability - SecurityWeek
SecurityWeek 2026-09-28
▸ Recent CVEs showing 20 of 51
CVE IDSeverityPatchEPSSDate
CVE-2026-102130 7.2 HIGH UNKNOWN / UNPATCHED — 2026-09-30
CVE-2026-102118 PoC 7.8 HIGH UNKNOWN / UNPATCHED — 2026-09-30
CVE-2026-102102 9.1 CRITICAL UNKNOWN / UNPATCHED — 2026-09-30
CVE-2026-102095 9.1 CRITICAL UNKNOWN / UNPATCHED — 2026-09-30
CVE-2026-102104 9.1 CRITICAL UNKNOWN / UNPATCHED — 2026-09-30
CVE-2026-102103 9.1 CRITICAL UNKNOWN / UNPATCHED — 2026-09-30
CVE-2026-102106 9.1 CRITICAL UNKNOWN / UNPATCHED — 2026-09-30
CVE-2026-102115 9.8 CRITICAL UNKNOWN / UNPATCHED — 2026-09-30
CVE-2026-102149 9.4 CRITICAL UNKNOWN / UNPATCHED — 2026-09-30
CVE-2026-102107 4.6 MEDIUM UNKNOWN / UNPATCHED 0.23% 2026-09-30
CVE-2026-102144 PoC 5.3 MEDIUM UNKNOWN / UNPATCHED 0.50% 2026-09-30
CVE-2026-102134 5.4 MEDIUM UNKNOWN / UNPATCHED 0.29% 2026-09-30
CVE-2026-102135 PoC 6.6 MEDIUM UNKNOWN / UNPATCHED 0.57% 2026-09-30
CVE-2026-102129 7.2 HIGH UNKNOWN / UNPATCHED — 2026-09-30
CVE-2026-102109 PoC 7.1 HIGH UNKNOWN / UNPATCHED — 2026-09-30
CVE-2026-102139 6.5 MEDIUM UNKNOWN / UNPATCHED 0.35% 2026-09-30
CVE-2026-102111 4.9 MEDIUM UNKNOWN / UNPATCHED 0.36% 2026-09-30
CVE-2026-102093 7.2 HIGH UNKNOWN / UNPATCHED — 2026-09-30
CVE-2026-102141 6.7 MEDIUM UNKNOWN / UNPATCHED 0.13% 2026-09-30
CVE-2026-102122 4.3 MEDIUM UNKNOWN / UNPATCHED 0.26% 2026-09-30
View all 51 CVEs for Kiteworks →
▸Intel
HQSan Mateo, California, United States
Founded1999
CEOTim Freestone
Trust ScoreC — CAUTION
Max CVSS9.8
Last Updated2026-10-14
▸Top Weaknesses
CWE-918
Server-Side Request Forgery (SSRF)
6 occurrences in Kiteworks CVEs (12% of total)
CWE-918 ⓘ
6
CWE-22
Unknown Weakness Type
5 occurrences in Kiteworks CVEs (10% of total)
CWE-22 ⓘ
5
CWE-306
Missing Authentication
4 occurrences in Kiteworks CVEs (8% of total)
CWE-306 ⓘ
4
CWE-502
Deserialization of Untrusted Data
3 occurrences in Kiteworks CVEs (6% of total)
CWE-502 ⓘ
3
CWE-78
Unknown Weakness Type
3 occurrences in Kiteworks CVEs (6% of total)
CWE-78 ⓘ
3
CWE-59
Unknown Weakness Type
2 occurrences in Kiteworks CVEs (4% of total)
CWE-59 ⓘ
2
CWE-89
SQL Injection
2 occurrences in Kiteworks CVEs (4% of total)
CWE-89 ⓘ
2
CWE-287
Improper Authentication
2 occurrences in Kiteworks CVEs (4% of total)
CWE-287 ⓘ
2
▸Company Profile

Kiteworks provides a secure file sharing and data governance platform, formerly known as Accellion, designed to protect sensitive content and communications for enterprises and government agencies. The company's significance in cybersecurity stems from its focus on secure collaboration and compliance, though it has been associated with notable vulnerabilities including the Accellion FTA zero-day attacks in 2020-2021.

▸Response Metrics
Est. MTTR ⓘ ~500 days (Critical)
Mean Time To Remediate. Estimates days from CVE disclosure to patch.
Industry avg: ~60d (good) · 100-300d (poor) · 300d+ (critical)
CVE Trend ⓘ ↗ +760% worse
CVE count 2026 vs 2025:  5 → 43 CVEs
Patch Speed ⓘ Poor (>65% open)
88% of CVEs still unpatched.  Excellent: <20% · Good: 20-40% · Avg: 40-65% · Poor: >65%
▸ Financial Risk Estimate
Est. GDPR Low
€619K
Est. GDPR High
€6.2M

Based on 9 critical CVEs, 0 CISA KEV, 88% unpatched. Model: GDPR Art.83 · not legal advice.

▸Actions
⚖ Compare with another vendor
▸Embed Badge
Kiteworks C valtersit.com