Kiteworks patches max severity code injection vulnerability
-
Kiteworks has shipped security updates addressing 126 vulnerabilities across its product line, including a maximum-severity flaw in its Email Protection Gateway (EPG) solution.
The most serious issue is a code injection vulnerability in Kiteworks EPG. Code injection flaws allow attackers to introduce and execute malicious code within a vulnerable application, which can potentially lead to data theft, service disruption, or broader compromise of the affected environment. The article does not specify a CVE identifier for this flaw.
Given the volume of fixes and the severity rating of the EPG issue, administrators running Kiteworks products — particularly Email Protection Gateway — should prioritize reviewing the vendor's advisory and applying the available updates promptly.
- Affected product: Kiteworks Email Protection Gateway (EPG)
- Total vulnerabilities patched: 126
- Highest severity: maximum
- Action: apply the latest Kiteworks security updates
Source: BleepingComputer
Does your organization run Kiteworks EPG, and if so, how quickly are you planning to roll out these patches?
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login