An authenticated administrator could bypass the content validation applied to an administrative file upload and store a file containing dangerous content on the appliance. This did not by itself result in code execution, which would require a separate vulnerability to run the stored file.
Fix
Patch, vendor advisory and mitigation references on NVD 1
- https://github.com/kiteworks/security-advisories/security/advisories/GHSA-m6cv-4pjv-7435 Vendor Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 4.1 · accellionNVD modified 2026-10-13 11:59
Affected (CPE criteria) 1
cpe:2.3:a:accellion:kiteworks:*:*:*:*:*:*:*:*