CVE-2026-102119
Accellion Kiteworks: path traversal can lead to remote code execution
- Risk score
- 58/100
- CVSS
- 7.2 v3.1
- Exploit chance (30 days)
- 1.4%
- Published
- 30 Sep 2026
Open in the live forecast Today's forecast
What to know
- What it is
- A path traversal weakness in an optional, non-default administrative feature allowed an authenticated administrator to move files to unintended locations outside the feature's designated directory. This could potentially be leveraged to execute arbitrary code on the underlying system.
- Affected
- Accellion Kiteworks
- Fix
- Apply the vendor's security update; see the linked advisory.
- Exploitation
- No known exploitation
Why it is Yellow
- CVSS 7.2 high
References
Original description
A path traversal weakness in an optional, non-default administrative feature allowed an authenticated administrator to move files to unintended locations outside the feature's designated directory. This could potentially be leveraged to execute arbitrary code on the underlying system.
Last activity 30 Sep 2026. Patch Forecast updates every hour.