CVE-2026-23514 - Vulnerability Analysis

Overview

Kiteworks Core 9.2.0 and 9.2.1 contain a broken access control vulnerability caused by improper authorization checks, letting authenticated users access unauthorized content, exploit requires user authentication.

Severity & Score

Impact

Authenticated users can access unauthorized content, potentially leading to data exposure.

Mitigation

Upgrade to version 9.2.2 or later.

References

• https://github.com/kiteworks/security-advisories/security/advisories/GHSA-5gqr-cpr6-wvm5

Social Media Activity(1 post)

TheHackerWire

@thehackerwire

Mar 26, 2026

🟠 CVE-2026-23514 - High (8.8) Kiteworks is a private data network (PDN). Versions 9.2.0 and 9.2.1 of Kiteworks Core have an access control vulnerability that allows authenticated users to access unauthorized content. Upgrade Kiteworks Core to version 9.2.2 or later to receive ... 🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-23514/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner