CVE-2026-102111

Katalog CVE

CVSS 4.9 · Medium EPSS 0,21%

Kerentanan Improper Validation of Specified Quantity in Input pada accellion kiteworks. Skor CVSS 3.1 4.9 (Medium) menurut CNA.

Deskripsi (NVD)

Kiteworks did not enforce the maximum permitted value for a configurable security-policy setting. An authenticated administrator could set this value outside its intended range so that the associated control never activated, while the control continued to appear enabled in the administrative interface and audit log, allowing it to be silently rendered ineffective.

Rincian

Terbit di NVD

30 September 2026

Terakhir diubah

7 Oktober 2026

Status NVD

Analyzed

CVSS 3.1

4.9 (Medium), sumber CNA
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-1284: Improper Validation of Specified Quantity in Input

EPSS (30 hari)

0,21% peluang dieksploitasi; lebih tinggi dari 10,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/kiteworks/security-advisories/security/advisories/GHSA-4r97-hch3-g2f9 advisory vendor
• https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/VA/white/2026/va-26-274-01.json broken link