Skip to content
Noroxi

truff, https://yeswehack.com/hunters/truff

38 credited records · 38 in the last 12 months · 0 in CISA KEV

Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.

Get told when this name is credited on a new CVE

If it's you, this is the easiest way to track your records: we'll notify you in the daily email digest when a new one is published.

Follow new records for truff, https://yeswehack.com/hunters/truff

When you'll hear from us

  • when this name is credited on a new CVE record

One daily email digest (06:00 UTC); connect a webhook for KEV listings and weaponized exploits instantly.

Your free account also gets you

Running WordPress? Scan your site free with WP Lens

  • Stack alerts: add the products and versions you run, get the new CVEs that affect them
  • Uptime monitoring: 1 site, instant email when it goes down
  • Add your domain: subdomains and takeover risk scanned every week (1 domain)
  • 10 scans an hour on the security tools (3 a day without an account), an API key and MCP
  • All your scans in one panel: findings, what changed in the last scan, a report per domain or per client (PDF, share link)
All free tools

Sign up with email · Have an account? Sign in

Free account, no card. Unfollow any time.

Don't want an account? Get "Exploited this week" by email every Monday

Credited records

Researchers
  • CVE-2026-102147
    37Monitor

    Kiteworks Core Administrative Account Takeover through Stored Cross-site Scripting (XSS)

    CriticalCVSS 9.3No exploitEPSS 0%

    accellion · kiteworksSep 30, 2026

  • CVE-2026-102145
    26Monitor

    Kiteworks Core Server-Side Request Forgery through CRLF Injection

    MediumCVSS 6.6No exploitEPSS 0%

    accellion · kiteworksSep 30, 2026

  • CVE-2026-102143
    30Monitor

    Kiteworks Email Protection Gateway Unrestricted Upload of File with Dangerous Type

    HighCVSS 7.5No exploitEPSS 0%

    accellion · kiteworksSep 30, 2026

  • CVE-2026-102142
    28Monitor

    Kiteworks Core Remote Code Execution through Server-Side Template Injection

    HighCVSS 7.2No exploitEPSS 1%

    accellion · kiteworksSep 30, 2026

  • CVE-2026-102141
    26Monitor

    Kiteworks Core Privilege Escalation through External Control of File Name or Path

    MediumCVSS 6.7No exploitEPSS 0%

    accellion · kiteworksSep 30, 2026

  • CVE-2026-102140
    19Monitor

    Kiteworks Core Insufficient Verification of Data Authenticity

    MediumCVSS 4.9No exploitEPSS 0%

    accellion · kiteworksSep 30, 2026

  • CVE-2026-102138
    13Monitor

    Kiteworks Core Server-Side Request Forgery (SSRF)

    LowCVSS 3.3No exploitEPSS 0%

    accellion · kiteworksSep 30, 2026

  • CVE-2026-102136
    25Monitor

    Kiteworks Core Command Execution through Configuration Injection

    MediumCVSS 6.3No exploitEPSS 0%

    accellion · kiteworksSep 30, 2026

  • CVE-2026-102135
    26Monitor

    Kiteworks Email Protection Gateway Deserialization of Untrusted Data

    MediumCVSS 6.6No exploitEPSS 1%

    accellion · kiteworksSep 30, 2026

  • CVE-2026-102133
    26Monitor

    Kiteworks Core Arbitrary File Write through Command Injection

    MediumCVSS 6.6No exploitEPSS 1%

    accellion · kiteworksSep 30, 2026

  • CVE-2026-102132
    28Monitor

    Kiteworks Core Privilege Escalation through Improper Access Control

    HighCVSS 7.2No exploitEPSS 1%

    accellion · kiteworksSep 30, 2026

  • CVE-2026-102131
    28Monitor

    Kiteworks Email Protection Gateway Improper Handling of Case Sensitivity

    HighCVSS 7.2No exploitEPSS 1%

    accellion · kiteworksSep 30, 2026

  • CVE-2026-102130
    28Monitor

    Kiteworks Email Protection Gateway Remote Code Execution

    HighCVSS 7.2No exploitEPSS 1%

    accellion · kiteworksSep 30, 2026

  • CVE-2026-102129
    28Monitor

    Kiteworks Core Incorrect Privilege Assignment

    HighCVSS 7.2No exploitEPSS 0%

    accellion · kiteworksSep 30, 2026

  • CVE-2026-102126
    32Monitor

    Kiteworks Core Stored Cross-site Scripting (XSS)

    HighCVSS 8.1No exploitEPSS 0%

    accellion · kiteworksSep 30, 2026

  • CVE-2026-102125
    35Monitor

    Kiteworks Core Sandbox Escape

    HighCVSS 8.8No exploitEPSS 0%

    accellion · kiteworksSep 30, 2026

  • CVE-2026-102124
    26Monitor

    Kiteworks Core Missing Authentication for Critical Function

    MediumCVSS 6.5No exploitEPSS 0%

    accellion · kiteworksSep 30, 2026

  • CVE-2026-102123
    29Monitor

    Kiteworks Core Path Traversal

    HighCVSS 7.4No exploitEPSS 0%

    accellion · kiteworksSep 30, 2026

  • CVE-2026-102120
    35Monitor

    Kiteworks Core OS Command Injection

    HighCVSS 8.8No exploitEPSS 0%

    accellion · kiteworksSep 30, 2026

  • CVE-2026-102119
    28Monitor

    Kiteworks Email Protection Gateway Path Traversal

    HighCVSS 7.2No exploitEPSS 1%

    accellion · kiteworksSep 30, 2026

  • CVE-2026-102118
    31Monitor

    Kiteworks Core before version 9.5.0 is vulnerable to Local Privilege Escalation

    HighCVSS 7.8No exploitEPSS 0%

    accellion · kiteworksSep 30, 2026

  • CVE-2026-102117
    28Monitor

    Kiteworks Core Remote Code Execution

    HighCVSS 7.2No exploitEPSS 1%

    accellion · kiteworksSep 30, 2026

  • CVE-2026-102116
    29Monitor

    Kiteworks Email Protection Gateway Path Traversal

    HighCVSS 7.2No exploitEPSS 1%

    accellion · kiteworksSep 30, 2026

  • CVE-2026-102115
    39Monitor

    Kiteworks Core Authentication Bypass in the Password Reset Workflow

    CriticalCVSS 9.8No exploitEPSS 1%

    accellion · kiteworksSep 30, 2026

  • CVE-2026-102114
    29Monitor

    Kiteworks Core OS Command Injection

    HighCVSS 7.2No exploitEPSS 3%

    accellion · kiteworksSep 30, 2026