📦 Kiteworks Managed File Transfer

Kiteworks MFT versions before 9.1.0 have a session timeout vulnerability where user sessions may not properly expire after inactivity. This allows attackers with physical or network access to potentia...

This vulnerability in Kiteworks MFT allows attackers with administrative privileges to intercept upstream communications under certain circumstances, potentially leading to privilege escalation. It af...

This Cross-Site Request Forgery (CSRF) vulnerability in Kiteworks MFT allows attackers to trick administrators into browsing malicious pages, potentially exposing sensitive log information. All Kitewo...

CVE-2025-53900 is a privilege escalation vulnerability in Kiteworks MFT where authorized users can gain elevated permissions through improper role definitions in Connections management. This affects a...