VulnerabilityAnalyzed

CVE-2026-102140

This could allow unverified or forged content to be accepted and processed, affecting the integrity of the imported data.

MEDIUM 4.9EPSS 0.14%

Does this matter?

Lower severity and a low EPSS score (0.14%). Track it; it rarely justifies an emergency change on its own.

Description

An authenticated administrator could initiate an administrative import using a file whose contents were not fully verified, because the import validated only the file's header rather than the complete file. This could allow unverified or forged content to be accepted and processed, affecting the integrity of the imported data.

CVSS 3.1: 4.9 MEDIUMCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
EPSS: 0.14% probability · 3th percentile
Public exploits: None in Exploit-DB
CISA KEV: Not listed
Weakness: CWE-345
Affected: accellion/kiteworks
Source: 9119a7d8-5eab-497f-8521-727c672e3725

EPSS trend

EPSS moved from 0.2% on 1 October 2026 to 0.1% on 26 October 2026.

References

Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.