{"id":"CVE-2026-102125","url":"https://www.cyber-defence.io/tools/cve/CVE-2026-102125","generatedAt":"2026-10-28T02:24:05.351Z","title":"Code already executing within that sandbox could potentially escape its confinement and act with the privileges of the service account that runs the application, which could allow an attacker in that position to read or modify application data and…","description":"The sandbox that isolates document conversion on a Kiteworks appliance did not fully confine the code running inside it. Code already executing within that sandbox could potentially escape its confinement and act with the privileges of the service account that runs the application, which could allow an attacker in that position to read or modify application data and configuration, or to disrupt the service on the affected appliance.","published":"2026-09-30T21:17:01.000Z","lastModified":"2026-10-08T13:43:52.000Z","status":"Analyzed","sourceIdentifier":"9119a7d8-5eab-497f-8521-727c672e3725","cvss":{"version":"3.1","score":8.8,"severity":"HIGH","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H"},"cwe":["CWE-653","CWE-668"],"affected":["accellion/kiteworks"],"epss":{"score":0.00392,"percentile":0.3303,"date":"2026-10-26","history":[{"date":"2026-10-01","score":0.00165,"percentile":0.05117}]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unlikely (0.39%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[{"kind":"new","label":"New CVE","at":"2026-09-30T21:17:01.000Z","detail":{"score":"8.8","severity":"HIGH","publishedAt":"2026-09-30T21:17:00.813Z"},"summary":"New CVE, high severity (CVSS 8.8)."}],"references":[{"url":"https://github.com/kiteworks/security-advisories/security/advisories/GHSA-58j2-hj9r-c258","tags":["Broken Link"],"source":"9119a7d8-5eab-497f-8521-727c672e3725"},{"url":"https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/VA/white/2026/va-26-274-01.json","tags":["Broken Link"],"source":"9119a7d8-5eab-497f-8521-727c672e3725"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-102125","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}