CVE-2022-24110: Accellion Managed File Transfer

Medium severity, CVSS 6.5. EPSS: 0.7% chance of exploitation in the next 30 days.

Kiteworks MFT 7.5 may allow an unauthorized user to reset other users' passwords. This is fixed in version 7.6 and later.

Affected products

• Accellion Managed File Transfer: before 7.6 (fixed in 7.6)

Published 2022-02-14. Last modified 2026-06-17.