CVEvulnerability

CVE-2026-102093

7.2 HIGH Published 2026-09-30 Modified 2026-10-07 Official page ↗
Status
Analyzed
Published
2026-09-30
Last modified
2026-10-07
Assigner
9119a7d8-5eab-497f-8521-727c672e3725
CVSS 3.1 (9119a7d8-5eab-497f-8521-727c672e3725)
7.2 HIGH — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-269

Description

Kiteworks Core before version 9.5.0 is vulnerable to Improper Privilege Management and does not correctly enforce restrictions on role assignment, which could allow an authenticated administrative user with limited, non-Sysadmin role-management permissions to elevate another user to full system-administrator privileges beyond those the administrative user was authorized to grant.

Affected configurations

• accellion kiteworks (< 9.5.0)

Related

Weakness · CWE (1)

  • CWE-269 Improper Privilege Management weakness

References