Skip to content

Products › Brands

Brand

Kiteworks (Accellion): actively exploited vulnerabilities

4 vulnerabilities in Kiteworks (Accellion) products (FTA (File Transfer Appliance)) are in CISA’s catalog of exploited vulnerabilities. Last added: November 3, 2021.

The brand’s general security advisories page, not the advisory for a specific vulnerability (address checked September 28, 2026).

By category

Add just one Kiteworks (Accellion) category to your radar, or open its page.

A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.

Affected products

  • FTA (File Transfer Appliance) 4 vulnerabilities · File transfer (MFT)

Name used by CISA: Accellion. Product families: indicative classification by this site.

Patch first

In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this Kiteworks (Accellion) list.

  1. Rank 1Kiteworks (Accellion) FTA (File Transfer Appliance)

    CVE-2021-27101

    Ransomware

    Accellion FTA SQL Injection Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    14 days
    CVSS severity
    9.8 (critical)
  2. Rank 2Kiteworks (Accellion) FTA (File Transfer Appliance)

    CVE-2021-27103

    Ransomware

    Accellion FTA Server-Side Request Forgery (SSRF) Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    14 days
    CVSS severity
    9.8 (critical)
  3. Rank 3Kiteworks (Accellion) FTA (File Transfer Appliance)

    CVE-2021-27104

    Ransomware

    Accellion FTA OS Command Injection Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    14 days
    CVSS severity
    9.8 (critical)
  4. Rank 4Kiteworks (Accellion) FTA (File Transfer Appliance)

    CVE-2021-27102

    Ransomware

    Accellion FTA OS Command Injection Vulnerability

    Added more than a year ago: ranked by severity.

    Added
    Nov 3, 2021
    CISA deadline
    14 days
    CVSS severity
    7.8 (high)

Follow and verify

Indicative classification, based on the vendor and product names given by CISA. How products are classified.