Is CVE-2026-102096 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-102096?

CVE-2026-102096 has a CVSS v3 severity of HIGH (7.2).

Back

CVE-2026-102096

Description

Kiteworks Core before version 9.5.0 is vulnerable to OS Command Injection that allows an authenticated administrator to upload a configuration package whose contents were not sufficiently validated before being processed. A crafted package could cause the underlying system to execute arbitrary operating-system commands, potentially with elevated privileges, on the affected appliance.