CVE-2026-28272 - Kiteworks Email Protection Gateway has a Cross-site Scripting vulnerability

CVE ID : CVE-2026-28272 Published : Feb. 27, 2026, 9:16 p.m. | 19 minutes ago Description : Kiteworks is a private data network (PDN). Prior to version 9.2.0, a vulnerability in Kiteworks Email Protection Gateway allows authenticated administrators to inject malicious scripts through a configuration interface. The stored script executes when users interact with the affected user interface. Version 9.2.0 contains a patch for the issue. Severity: 8.1 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...