Kiteworks Issues Urgent Shutdown Advisory Amid Zero-Day Threat

• •Kiteworks recommends a precautionary shutdown of systems due to an imminent zero-day threat.
• •The advisory affects all customers globally, with a six-hour shutdown window starting September 26, 2026.
• •No specific CVE has been assigned for the vulnerability, raising concerns about the nature of the threat.

Kiteworks has alerted its customers to shut down their servers due to credible threat intelligence indicating an imminent cyberattack exploiting a zero-day vulnerability. The advisory, which applies globally, recommends a six-hour shutdown window starting September 26, 2026. This precautionary measure comes as Kiteworks, formerly known as Accellion, has faced scrutiny following previous breaches linked to vulnerabilities in its file transfer application. The exact nature of the vulnerability remains undisclosed, and no CVE has been assigned yet. Security experts have expressed concern over the unusual nature of the advisory, as it suggests a serious threat without confirmed details. The company has confirmed that all known vulnerabilities have been patched in its latest software release, version 9.5.1. Kiteworks serves a wide range of industries, including healthcare and finance, raising the stakes for potential data breaches.