CVE-2026-29092

Kiteworks is a private data network (PDN). Prior to version 9.2.1, a vulnerability in Kiteworks Email Protection Gateway session management allows blocked users to maintain active sessions after their account is disabled. This could allow unauthorized access to continue until the session naturally expires. Upgrade Kiteworks to version 9.2.1 or later to receive a patch.

• CWE-613

• https://github.com/kiteworks/security-advisories/security/advisories/GHSA-92w7-fpjr-wpxcVendor Advisory

Published

Mar 25, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-29086Hono is a Web application framework that provides support fo…5.4
• CVE-2026-29087@hono/node-server allows running the Hono application on Nod…7.5
• CVE-2026-29089TimescaleDB is a time-series database for high-performance r…8.8
• CVE-2026-2909A vulnerability was detected in Tenda HG9 300001138. This af…8.8
• CVE-2026-29090### Summary A SQL injection vulnerability exists in Rucio v…8.8
• CVE-2026-29091Locutus brings stdlibs of other programming languages to Jav…8.1
• CVE-2026-29093WWBN AVideo is an open source video platform. Prior to versi…9.8
• CVE-2026-29096SuiteCRM is an open-source, enterprise-ready Customer Relati…6.5
• CVE-2026-29097SuiteCRM is an open-source, enterprise-ready Customer Relati…7.5
• CVE-2026-29098SuiteCRM is an open-source, enterprise-ready Customer Relati…4.9
• CVE-2026-29099SuiteCRM is an open-source, enterprise-ready Customer Relati…8.8
• CVE-2026-2910A flaw has been found in Tenda HG9 300001138. This vulnerabi…8.8