CVE-2026-102140
Last modified
CVE-2026-102140 is a medium-severity vulnerability rated 4.9/10 on the CVSS scale. An authenticated administrator could initiate an administrative import using a file whose contents were not fully verified, because the import validated only the file's header rather than the complete file. This could allow unverified or forged content to be accepted and processed, affecting the integrity of the imported data..
Description
An authenticated administrator could initiate an administrative import using a file whose contents were not fully verified, because the import validated only the file's header rather than the complete file. This could allow unverified or forged content to be accepted and processed, affecting the integrity of the imported data.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Kiteworks | Core | < 9.5.1 |
References
Timeline
- Published
- Last Modified
- Status
- Awaiting Analysis
Frequently Asked Questions
What is CVE-2026-102140?
How severe is CVE-2026-102140?
How do I fix CVE-2026-102140?
How Strix Helps
- Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-102135On a Kiteworks Email Protection Gateway cluster with databas…6.6
- CVE-2026-102136In multi-node deployments, an attacker who had already obtai…6.3
- CVE-2026-102137An authenticated administrator could bypass the content vali…4.1
- CVE-2026-102138An authenticated administrator on a node with an optional, s…3.3
- CVE-2026-102139An authorization check in the large file exchange feature of…6.5
- CVE-2026-10214A weakness has been identified in zhayujie chatgpt-on-wechat…7.3
- CVE-2026-102141Two Kiteworks Core cluster-management operations did not val…6.7
- CVE-2026-102142A system notification template on the Kiteworks appliance wa…7.2
- CVE-2026-102143An unauthenticated attacker could cause a file with attacker…7.5
- CVE-2026-102144A resource exhaustion vulnerability in Kiteworks Email Prote…5.3
- CVE-2026-102145An authenticated administrator could cause the server to iss…6.6
- CVE-2026-102146An authenticated Email Protection Gateway administrator hold…6.5
Are you affected by CVE-2026-102140?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST