CVE-2026-102096
HIGH
NVD
CVSS Score
7.2
Severity
HIGH
Published
Sep 30, 2026
Vendor
unknown
Description
Kiteworks Core before version 9.5.0 is vulnerable to OS Command Injection that allows an authenticated administrator to upload a configuration package whose contents were not sufficiently validated before being processed. A crafted package could cause the underlying system to execute arbitrary operating-system commands, potentially with elevated privileges, on the affected appliance.