SecurityBleepingComputerabout 1 hour ago
Kiteworks Patches Max Severity Code Injection Flaw
3 min read
Kiteworks patched 126 vulnerabilities, including a maximum-severity flaw in its Email Protection Gateway that lets unauthenticated attackers execute code and gain root control. The flaw, CVE-2026-54154, affects versions before 9.4.1. The company had urged customers to shut down servers last week over a possible zero-day, then lifted the advisory Monday after patching and restoring hosted systems.
Level
Hype check
Tap to vote and see what everyone thinks.
