[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fdZUy12VNREHbLlTh1Tsc6Rso1K41zaB8ti3Ff5hDt6I":3},{"article":4,"iocs":50,"watch_terms":55,"solutions":56,"lesson":142},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":32,"category":33,"article_tags":37},"1b73867b-9370-4151-bac7-e0f79d7b8156","Kiteworks patches max severity code injection vulnerability","kiteworks-patches-max-severity-code-injection-vulnerability-3e59dc","Secure file-sharing software company Kiteworks has released security updates to address 126 vulnerabilities, including a max-severity flaw affecting its Email Protection Gateway (EPG) security solution. [...]","Kiteworks has released security updates to address 126 vulnerabilities, including a critical code injection flaw (CVE-2026-54154) in its Email Protection Gateway (EPG). This vulnerability, exploitable by unauthenticated remote attackers, could lead to arbitrary code execution and administrative control. The company also recently urged customers to shut down servers due to a potential zero-day threat, which was later patched without evidence of compromise.","Kiteworks patches a max-severity code injection vulnerability in its Email Protection Gateway.","https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Fkiteworks-patches-max-severity-email-protection-gateway-code-injection-vulnerability\u002F","https:\u002F\u002Fwww.bleepstatic.com\u002Fcontent\u002Fhl-images\u002F2026\u002F10\u002F01\u002FKiteworks.jpg","2026-10-01T13:51:08+00:00","2026-10-01T14:00:26.577057+00:00",8,[17,20,22,25,27,30],{"name":18,"type":19},"Email Protection Gateway","product",{"name":21,"type":19},"Private Content Network",{"name":23,"type":24},"Kiteworks","vendor",{"name":26,"type":24},"Accellion",{"name":28,"type":29},"MFT","technology",{"name":31,"type":29},"XSS","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":32,"icon":34,"name":35,"slug":36},null,"Vulnerabilities","vulnerabilities",[38,43,45],{"category":39},{"id":40,"icon":34,"name":41,"slug":42},"26b0b636-0e31-4db1-bffb-61bdf9f20a58","Supply Chain","supply-chain",{"category":44},{"id":32,"icon":34,"name":35,"slug":36},{"category":46},{"id":47,"icon":34,"name":48,"slug":49},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[51],{"type":52,"value":53,"context":54},"cve","CVE-2026-54154","Maximum severity code injection vulnerability in Kiteworks Email Protection Gateway",[23,26,18],{"controls":57,"vendors":141},[58,87,112],{"slug":59,"name":60,"problem":61,"products":62},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[63,71,79],{"vendor_slug":64,"vendor_name":65,"vendor_logo":66,"product_slug":67,"product_name":68,"url":69,"description":70},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","vmdr","Qualys VMDR","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fvulnerability-management-detection-response\u002F","Vulnerability management, detection and response with risk-based prioritisation.",{"vendor_slug":72,"vendor_name":73,"vendor_logo":74,"product_slug":75,"product_name":76,"url":77,"description":78},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-vulnerability-management","Tenable Vulnerability Management","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fvulnerability-management","Cloud-based vulnerability scanning and prioritisation, built on Nessus.",{"vendor_slug":80,"vendor_name":81,"vendor_logo":82,"product_slug":83,"product_name":84,"url":85,"description":86},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",{"slug":88,"name":89,"problem":90,"products":91},"patch-management","Automated patch management","Known holes get closed in days, not months.",[92,100,104],{"vendor_slug":93,"vendor_name":94,"vendor_logo":95,"product_slug":96,"product_name":97,"url":98,"description":99},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","intune","Microsoft Intune","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fmicrosoft-intune","Device management for Windows, macOS, iOS and Android, including update rings and compliance policies.",{"vendor_slug":64,"vendor_name":65,"vendor_logo":66,"product_slug":88,"product_name":101,"url":102,"description":103},"Qualys Patch Management","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fpatch-management\u002F","Patch deployment for operating systems and third-party applications, linked to vulnerability findings.",{"vendor_slug":105,"vendor_name":106,"vendor_logo":107,"product_slug":108,"product_name":109,"url":110,"description":111},"ninjaone","NinjaOne","\u002Fvendor-logos\u002Fninjaone.png","ninjaone-patch-management","NinjaOne Patch Management","https:\u002F\u002Fwww.ninjaone.com\u002Fpatch-management\u002F","Automated patching of operating systems and third-party applications from the cloud.",{"slug":113,"name":114,"problem":115,"products":116},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",[117,125,133],{"vendor_slug":118,"vendor_name":119,"vendor_logo":120,"product_slug":121,"product_name":122,"url":123,"description":124},"withsecure","WithSecure","\u002Fvendor-logos\u002Fwithsecure.png","elements-xdr","WithSecure Elements XDR","https:\u002F\u002Fwww.withsecure.com\u002Fen\u002Ffor-business\u002Fplatform\u002Fxdr\u002F","Endpoint detection and response with extended detection, on the Elements cloud platform.",{"vendor_slug":126,"vendor_name":127,"vendor_logo":128,"product_slug":129,"product_name":130,"url":131,"description":132},"sentinelone","SentinelOne","\u002Fvendor-logos\u002Fsentinelone.png","singularity-endpoint","Singularity Endpoint","https:\u002F\u002Fwww.sentinelone.com\u002Fplatform\u002Fendpoint-security\u002F","Endpoint protection and detection with automated response and rollback.",{"vendor_slug":134,"vendor_name":135,"vendor_logo":136,"product_slug":137,"product_name":138,"url":139,"description":140},"eset","ESET","\u002Fvendor-logos\u002Feset.png","eset-protect","ESET PROTECT","https:\u002F\u002Fwww.eset.com\u002Fint\u002Fbusiness\u002Fsolutions\u002Fendpoint-protection\u002F","Endpoint protection platform with detection and response add-ons.",[],{"slug":143,"title":144,"body":145,"framework_refs":146,"framework_notes":157},"critical-unauthenticated-code-injection-flaw-in-kiteworks-epg-demands-immediate-patching","Critical Unauthenticated Code Injection Flaw in Kiteworks EPG Demands Immediate Patching","A maximum-severity code injection vulnerability (CVE-2026-54154) in Kiteworks' Email Protection Gateway allowed unauthenticated remote attackers to execute arbitrary code and seize administrative control — representing one of the most dangerous threat profiles possible. The flaw existed in an internet-facing component responsible for handling sensitive email communications, amplifying the potential blast radius of exploitation. Compounding the risk, Kiteworks simultaneously disclosed a separate zero-day threat, suggesting the platform was under active attacker scrutiny. This case underscores the danger of delaying patches on externally accessible systems and the critical importance of having rapid response procedures in place for high-severity disclosures.",[147,148,149,150,151,152,153,154,155,156],"CIS Control 7: Continuous Vulnerability Management","CIS Control 12: Network Infrastructure Management","CIS Control 18: Penetration Testing","NIST SP 800-53 SI-2: Flaw Remediation","NIST SP 800-53 AC-17: Remote Access","NIST SP 800-53 SC-7: Boundary Protection","NIST CSF ID.RA-1: Asset Vulnerabilities Identified","NIST CSF RS.MI-3: Newly Identified Vulnerabilities Mitigated","ISO\u002FIEC 27001 A.12.6.1: Management of Technical Vulnerabilities","GDPR Article 32: Security of Processing (for EU-hosted deployments)",{"CIS Control 18: Penetration Testing":158,"NIST SP 800-53 AC-17: Remote Access":159,"NIST SP 800-53 SI-2: Flaw Remediation":160,"NIST SP 800-53 SC-7: Boundary Protection":161,"CIS Control 12: Network Infrastructure Management":162,"CIS Control 7: Continuous Vulnerability Management":163,"NIST CSF ID.RA-1: Asset Vulnerabilities Identified":164,"NIST CSF RS.MI-3: Newly Identified Vulnerabilities Mitigated":165,"ISO\u002FIEC 27001 A.12.6.1: Management of Technical Vulnerabilities":166,"GDPR Article 32: Security of Processing (for EU-hosted deployments)":167},"Penetration testing of internet-facing gateways helps find injection flaws before attackers do.","Remote access controls limit who can reach administrative functions on the gateway.","Flaw remediation requires immediate patching of this unauthenticated code injection flaw.","Boundary protection reduces exposure of the gateway to untrusted networks where possible.","Network infrastructure management can restrict access to the gateway's management interfaces.","Continuous vulnerability management ensures the Kiteworks EPG is patched immediately given the maximum-severity flaw.","Identifying vulnerable Kiteworks EPG deployments is essential to knowing exposure.","Mitigating newly found vulnerabilities quickly closes the path to administrative takeover.","Managing technical vulnerabilities requires timely patching of exposed systems like the EPG.","Securing email gateways that handle personal data is part of Article 32's appropriate measures."]