The most serious issue is a code injection vulnerability in Kiteworks EPG. Code injection flaws allow attackers to introduce and execute malicious code within a vulnerable application, which can potentially lead to data theft, service disruption, or broader compromise of the affected environment. The article does not specify a CVE identifier for this flaw.

Given the volume of fixes and the severity rating of the EPG issue, administrators running Kiteworks products — particularly Email Protection Gateway — should prioritize reviewing the vendor's advisory and applying the available updates promptly.

• Affected product: Kiteworks Email Protection Gateway (EPG)
• Total vulnerabilities patched: 126
• Highest severity: maximum
• Action: apply the latest Kiteworks security updates

Source: BleepingComputer

Does your organization run Kiteworks EPG, and if so, how quickly are you planning to roll out these patches?