Brand
Kiteworks (Accellion): actively exploited vulnerabilities
4 vulnerabilities in Kiteworks (Accellion) products (FTA (File Transfer Appliance)) are in CISA’s catalog of exploited vulnerabilities. Last added: November 3, 2021.
The brand’s general security advisories page, not the advisory for a specific vulnerability (address checked September 28, 2026).
-
0 vulnerabilities added in the last 12 months
-
4 exploited vulnerabilities in the catalog, in total
-
0 added in the last 30 days
By category
Add just one Kiteworks (Accellion) category to your radar, or open its page.
- Managed file transfer (MFT) 4 vulnerabilities
A high count also reflects how widely a product is deployed and how much attackers care about it: it is not a security rating.
Affected products
- FTA (File Transfer Appliance) 4 vulnerabilities · File transfer (MFT)
Name used by CISA: Accellion. Product families: indicative classification by this site.
Patch first
In the order of the main list (Patch first): recent additions first, then the most severe. The number is the rank within this Kiteworks (Accellion) list.
Rank 1Kiteworks (Accellion) FTA (File Transfer Appliance)
CVE-2021-27101Ransomware
Accellion FTA SQL Injection Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Nov 3, 2021
- CISA deadline
- 14 days
- CVSS severity
- 9.8 (critical)
Rank 2Kiteworks (Accellion) FTA (File Transfer Appliance)
CVE-2021-27103Ransomware
Accellion FTA Server-Side Request Forgery (SSRF) Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Nov 3, 2021
- CISA deadline
- 14 days
- CVSS severity
- 9.8 (critical)
Rank 3Kiteworks (Accellion) FTA (File Transfer Appliance)
CVE-2021-27104Ransomware
Accellion FTA OS Command Injection Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Nov 3, 2021
- CISA deadline
- 14 days
- CVSS severity
- 9.8 (critical)
Rank 4Kiteworks (Accellion) FTA (File Transfer Appliance)
CVE-2021-27102Ransomware
Accellion FTA OS Command Injection Vulnerability
Added more than a year ago: ranked by severity.
- Added
- Nov 3, 2021
- CISA deadline
- 14 days
- CVSS severity
- 7.8 (high)
Follow and verify
Indicative classification, based on the vendor and product names given by CISA. How products are classified.