What’s Vulnerable › Products

Accellion Kiteworks Managed File Transfer vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your Accellion Kiteworks Managed File Transfer version is affected

Latest Accellion Kiteworks Managed File Transfer vulnerabilities

• CVE-2025-53900 — Kiteworks MFT has a Privilege Defined With Unsafe Actions (CVSS 8.8)
• CVE-2025-53899 — Kiteworks MFT is vulnerable to an Incorrectly Specified Destination in a Communication Channel (CVSS 7.2)
• CVE-2025-53897 — Kiteworks MFT has a Cross-Site Request Forgery (CSRF) vulnerability (CVSS 6.8)
• CVE-2025-53896 — Kiteworks MFT is vulnerable to Insufficient Session Expiration (CVSS 8.1)