Vulnerabilities
Summary — last 7 days
New vulnerabilities3,222▲ 222 vs. last week
Critical / high1,465▲ 132 vs. last week
New active exploitation (KEV)7▼ 3 vs. last week
Unscored (no CVSS)511▼ 31 vs. last week
2 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Awaiting Analysis | High (7.1) | 0.32% | — | Kiteworks Secure Data FormsAI | 9/30/2026 | 10/1/2026 | A SQL injection vulnerability existed in Kiteworks Secure Data Forms, where a value derived from the authenticated user's stored account data was incorporated into a database query without proper sanitization. An authenticated user could potentially influence that value to inject SQL. Exploitation requires an… | |
| Awaiting Analysis | High (7.5) | 0.45% | — | Kiteworks Secure Data FormsAI | 9/30/2026 | 10/1/2026 | Kiteworks Secure Data Forms before version 9.5.0 is vulnerable to Server-Side Request Forgery that could allow an unauthenticated, remote attacker to make the server issue arbitrary outbound network requests and read back the responses. This could potentially be used to reach internal-only services or other… |