CVE-2026-102112
HIGHCVSS 7.8Description
A privilege escalation vulnerability in Kiteworks could allow an attacker who has already obtained code execution as an unprivileged backend service account on the appliance to escalate to root and run arbitrary commands with the highest privileges. Exploitation requires existing local access to that service account.
Timeline
Published:September 30th, 2026 9:16 PM
Last modified:October 7th, 2026 1:56 PM
CVSS Scoring
CVSS v3: 7.8 (HIGH)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected Software
From NVD CPE configuration data
Vendors
accellion
Products
kiteworks
References & Reports
Advisories, patches, and third-party reports
Source: NIST NVD · Data may lag official sources by up to one minute