{"id":"CVE-2026-102140","url":"https://www.cyber-defence.io/tools/cve/CVE-2026-102140","generatedAt":"2026-10-28T00:59:35.705Z","title":"This could allow unverified or forged content to be accepted and processed, affecting the integrity of the imported data.","description":"An authenticated administrator could initiate an administrative import using a file whose contents were not fully verified, because the import validated only the file's header rather than the complete file. This could allow unverified or forged content to be accepted and processed, affecting the integrity of the imported data.","published":"2026-09-30T21:17:03.000Z","lastModified":"2026-10-13T11:58:29.000Z","status":"Analyzed","sourceIdentifier":"9119a7d8-5eab-497f-8521-727c672e3725","cvss":{"version":"3.1","score":4.9,"severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N"},"cwe":["CWE-345"],"affected":["accellion/kiteworks"],"epss":{"score":0.0014,"percentile":0.03285,"date":"2026-10-26","history":[{"date":"2026-10-01","score":0.00186,"percentile":0.07435}]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.14%). Track it; it rarely justifies an emergency change on its own."},"changes":[{"kind":"new","label":"New CVE","at":"2026-09-30T21:17:03.000Z","detail":{"score":"4.9","severity":"MEDIUM","publishedAt":"2026-09-30T21:17:02.783Z"},"summary":"New CVE, medium severity (CVSS 4.9)."}],"references":[{"url":"https://github.com/kiteworks/security-advisories/security/advisories/GHSA-wfxj-p5jc-jqjw","tags":["Vendor Advisory"],"source":"9119a7d8-5eab-497f-8521-727c672e3725"},{"url":"https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/VA/white/2026/va-26-274-01.json","tags":["Broken Link"],"source":"9119a7d8-5eab-497f-8521-727c672e3725"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-102140","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}