CVE-2026-28271

Katalog CVE

CVSS 6.5 · Medium EPSS 0,54%

Kerentanan Reliance on Reverse DNS Resolution for a Security-Critical Action pada accellion kiteworks. Skor CVSS 3.1 6.5 (Medium) menurut NVD.

Deskripsi (NVD)

Kiteworks is a private data network (PDN). Prior to version 9.2.0, a vulnerability in Kiteworks configuration functionality allows bypassing of SSRF protections through DNS rebinding attacks. Malicious administrators could exploit this to access internal services that should be restricted. Version 9.2.0 contains a patch for the issue.

Rincian

Terbit di NVD

27 Februari 2026

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

6.5 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-350: Reliance on Reverse DNS Resolution for a Security-Critical Action
CWE-918: Server-Side Request Forgery (SSRF)

EPSS (30 hari)

0,54% peluang dieksploitasi; lebih tinggi dari 44,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/kiteworks/security-advisories/security/advisories/GHSA-rmfx-6h9w-fq87 advisory vendor