
Kiteworks patches max severity code injection vulnerability
Kiteworks patched CVE-2026-54154, an unauthenticated code-injection flaw that can give attackers root on Email Protection Gateway appliances.
7 stories, newest first · one card per story

Kiteworks patched CVE-2026-54154, an unauthenticated code-injection flaw that can give attackers root on Email Protection Gateway appliances.

Kiteworks patched a critical, previously unknown vulnerability affecting under 1% of customers during a nine-hour precautionary shutdown triggered by attack intelligence.

Kiteworks patched a critical flaw and lifted a global shutdown advisory after finding no compromise.

Kiteworks briefly urged server shutdowns after finding a severe, apparently unexploited Advanced Forms vulnerability.

Kiteworks urged a nine-hour customer shutdown after a federal warning of a possible attack.
Kiteworks told customers to shut systems down after federal intel warned of possible targeting.

Kiteworks told customers to shut down file-transfer servers after law enforcement warned of an imminent attack.
Today 1.6K readers · 2.4K views · 775 reads · all time 189K views