Mmastodon TechnologyCybersecurity first seen 19 h ago, last 19 h ago, peak #6

Kiteworks Core deserialization flaw logged as high-severity vulnerability

Original: 🚨 EUVD-2026-90276 📊 Score: 8.1/10 (CVSS v3.1) 📦 Product: core 🏢 Vendor: Kiteworks 📅 Updated: 2026-09-30 📝 Kiteworks Core

Kiteworks Core versions before 9.5.0 are affected by a deserialization of untrusted data vulnerability, tracked as EUVD-2026-90276 with a CVSS v3.1 score of 8.1. Under certain conditions, the flaw could allow attackers to send crafted data that is deserialized unsafely, potentially leading to code execution. The advisory was updated on September 30, 2026, and users are advised to upgrade to version 9.5.0 or later.

Why now: A newly published high-severity advisory for a widely used secure file-sharing product prompts organisations to check whether their deployments need patching.

KiteworksKiteworks CoreEUVD-2026-90276

Open on mastodon →

Evidence

• 🚨 EUVD-2026-90276 📊 Score: 8.1/10 (CVSS v3.1) 📦 Product: core 🏢 Vendor: Kiteworks 📅 Updated: 2026-09-30 📝 Kiteworks Core before version 9.5.0 is vulnerable to Deserialization of Untrusted Data. A deserialization weakness in Kiteworks Core could, under certain conditions, allow… · EUVD_Bot

API: https://socialmediatrends-api.osmike.com/v1/trends/528012