BaselineWatch
Desk

CVE-2026-102137

4.1 medium SSVC exploitation: none Analyzed

An authenticated administrator could bypass the content validation applied to an administrative file upload and store a file containing dangerous content on the appliance. This did not by itself result in code execution, which would require a separate vulnerability to run the stored file.

Fix

Patch, vendor advisory and mitigation references on NVD 1

Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.

Change history 1

  1. First seenCVSS 4.1 · accellionNVD modified 2026-10-13 11:59

Affected (CPE criteria) 1

  • cpe:2.3:a:accellion:kiteworks:*:*:*:*:*:*:*:*

References 2