high7.2
CVE-2026-102142
A system notification template on the Kiteworks appliance was rendered by a template engine that evaluated expressions contained in the stored template body.
Impact
A system notification template on the Kiteworks appliance was rendered by a template engine that evaluated expressions contained in the stored template body. An authenticated System Administrator could potentially store a crafted template that executed operating-system commands on the appliance when the notification was next sent.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Accellion | Kiteworks | before 9.5.1 |