CVE-2021-31586: Accellion Kiteworks

High severity, CVSS 8.8. EPSS: 44.1% chance of exploitation in the next 30 days.

Accellion Kiteworks before 7.4.0 allows an authenticated user to perform SQL Injection via LDAPGroup Search.

Affected products

• Accellion Kiteworks: before 7.4.0 (fixed in 7.4.0)

Published 2021-06-23. Last modified 2026-06-17.