# Kiteworks vulnerabilities & exploitation > As of 2026-10-25, Threadlinqs tracks 13 Kiteworks CVEs, 0 in the CISA Known Exploited Vulnerabilities catalog, linked to 3 tracked threat campaigns. **Data as of:** 2026-10-25 ## Exploitation timeline Threadlinqs has recorded 13 Kiteworks CVEs published between 2026-03-15 and 2026-09-15. The busiest month was 2026-09 (9 new CVEs). None of them is listed in CISA KEV yet. ## Most exploited vulnerabilities Ranked with CISA KEV listings first, then EPSS exploit probability, then CVSS score. Showing 13 of 13 tracked Kiteworks CVEs. - [CVE-2026-23514](https://intel.threadlinqs.com/cve/CVE-2026-23514) — HIGH 8.8 · EPSS 1% · 2026-03-25 - [CVE-2026-102142](https://intel.threadlinqs.com/cve/CVE-2026-102142) — HIGH 7.2 · EPSS 0.4% · 2026-09-30 - [CVE-2026-102144](https://intel.threadlinqs.com/cve/CVE-2026-102144) — MEDIUM 5.3 · EPSS 0.4% · 2026-09-30 - [CVE-2026-102146](https://intel.threadlinqs.com/cve/CVE-2026-102146) — MEDIUM 6.5 · EPSS 0.3% · 2026-09-30 - [CVE-2026-102143](https://intel.threadlinqs.com/cve/CVE-2026-102143) — HIGH 7.5 · EPSS 0.3% · 2026-09-30 - [CVE-2026-23635](https://intel.threadlinqs.com/cve/CVE-2026-23635) — MEDIUM 6.5 · EPSS 0.3% · 2026-03-25 - [CVE-2026-102147](https://intel.threadlinqs.com/cve/CVE-2026-102147) — CRITICAL 9.3 · EPSS 0.3% · 2026-09-30 - [CVE-2026-24752](https://intel.threadlinqs.com/cve/CVE-2026-24752) — HIGH 8.2 · EPSS 0.3% · 2026-06-01 - [CVE-2026-102145](https://intel.threadlinqs.com/cve/CVE-2026-102145) — MEDIUM 6.6 · EPSS 0.3% · 2026-09-30 - [CVE-2026-102150](https://intel.threadlinqs.com/cve/CVE-2026-102150) — HIGH 7.2 · EPSS 0.2% · 2026-09-30 - [CVE-2026-102149](https://intel.threadlinqs.com/cve/CVE-2026-102149) — CRITICAL 9.4 · EPSS 0.2% · 2026-09-30 - [CVE-2026-24753](https://intel.threadlinqs.com/cve/CVE-2026-24753) — MEDIUM 6.5 · EPSS 0.2% · 2026-06-01 - [CVE-2026-102141](https://intel.threadlinqs.com/cve/CVE-2026-102141) — MEDIUM 6.7 · EPSS 0.1% · 2026-09-30 ## Products affected Threadlinqs normalises CPE and CNA product records across all 13 CVEs; 3 distinct Kiteworks products are affected. The most frequently affected: - Core — 5 CVEs - Email Protection Gateway — 4 CVEs - Secure Data Forms — 4 CVEs ## Threat activity 3 tracked threat campaigns reference Kiteworks products or exploit Kiteworks CVEs: - [Kiteworks 9.5.1 Patches 126 Vulnerabilities Including Critical Account Takeover in Core and Email Protection Gateway (CVE-2026-102147, CVE-2026-102149)](https://intel.threadlinqs.com/threat/TL-2026-2902) — CRITICAL — 2026-10-02 - [Kiteworks Urges Customers to Take Systems Offline Amid Suspected Zero-Day Threat](https://intel.threadlinqs.com/threat/TL-2026-2702) — CRITICAL — 2026-09-26 - [Kiteworks Urges Global Customers to Shut Down Servers for 6-9 Hours Over Federally-Warned Potential Zero-Day Targeting](https://intel.threadlinqs.com/threat/TL-2026-2670) — HIGH — 2026-09-25 ## How to prioritise Kiteworks patching This order follows the data Threadlinqs holds for Kiteworks, not a generic severity checklist: - No Kiteworks CVE is in CISA KEV yet, so rank by exploit probability instead. - Outside KEV, the highest EPSS scores are [CVE-2026-23514](https://intel.threadlinqs.com/cve/CVE-2026-23514) (1%), [CVE-2026-102142](https://intel.threadlinqs.com/cve/CVE-2026-102142) (0.4%), [CVE-2026-102144](https://intel.threadlinqs.com/cve/CVE-2026-102144) (0.4%). - 2 CVEs score Critical and 5 High on CVSS v3 (maximum 9.4, average 7.4); sequence these after KEV and high-EPSS items. ## About this data Vendor attribution comes from the CNA and CPE product records of each CVE, folded to one vendor name; CVSS, EPSS and KEV status are read from the Threadlinqs CVE catalog; campaign and actor links come from tracked threat records. Counts reflect the data as of 2026-10-25 and refresh daily. Canonical: https://intel.threadlinqs.com/vendors/kiteworks All vendors: https://intel.threadlinqs.com/vendors Full detection coverage and IOCs via the Threadlinqs MCP server (Purple tier): https://intel.threadlinqs.com/mcp