Gfi vulnerabilities

Products

• Mailessentials 22
• Archiver 11
• Helpdesk 5
• Kerio Connect 5
• Kerio Control 5
• Kerioconnect 3
• Mailsecurity 3

Newest

• gfi helpdesk GFI HelpDesk < 4.99.9 Stored XSS via charset Parameter CVE-2026-23753 4.8 MediumApril 20, 2026
• gfi helpdesk GFI HelpDesk < 4.99.9 Stored XSS via companyname Parameter CVE-2026-23752 4.8 MediumApril 20, 2026
• gfi helpdesk GFI HelpDesk < 4.99.9 Stored XSS via Troubleshooter Step Subject CVE-2026-23756 5.1 MediumApril 20, 2026
• gfi helpdesk GFI HelpDesk < 4.99.9 Stored XSS via editsubject Parameter CVE-2026-23758 5.1 MediumApril 20, 2026
• gfi helpdesk GFI HelpDesk < 4.99.10 Stored XSS via Reports Module CVE-2026-23757 5.1 MediumApril 20, 2026
• gfi archiver GFI Archiver MArc.Store Missing Authorization Authentication Bypass Vulnerability CVE-2026-2039 7.3 HighFebruary 20, 2026
• gfi archiver GFI Archiver MArc.Store Deserialization of Untrusted Data Remote Code Execution Vulnerability CVE-2026-2036 8.8 HighFebruary 20, 2026
• gfi archiver GFI Archiver MArc.Core Missing Authorization Authentication Bypass Vulnerability CVE-2026-2038 7.3 HighFebruary 20, 2026
• gfi archiver GFI Archiver MArc.Core Deserialization of Untrusted Data Remote Code Execution Vulnerability CVE-2026-2037 8.8 HighFebruary 20, 2026
• gfi mailessentials, gfi software mailessentials ai +1 more GFI MailEssentials AI < 22.4 ListServer.IsPathExist() Absolute Directory Traversal to File Enumeration CVE-2026-23621 5.3 MediumFebruary 19, 2026
• gfi mailessentials, gfi software mailessentials ai +1 more GFI MailEssentials AI < 22.4 ListServer.IsDBExist() Absolute Directory Traversal to File Enumeration CVE-2026-23620 5.3 MediumFebruary 19, 2026
• gfi mailessentials, gfi software mailessentials ai +1 more GFI MailEssentials AI < 22.4 General Settings Local Domains Domain Description Stored XSS CVE-2026-23619 5.1 MediumFebruary 19, 2026
• gfi mailessentials, gfi software mailessentials ai +1 more GFI MailEssentials AI < 22.4 Anti-Spam Spam Keyword Checking Subject Condition Stored XSS CVE-2026-23618 5.1 MediumFebruary 19, 2026
• gfi mailessentials, gfi software mailessentials ai +1 more GFI MailEssentials AI < 22.4 Anti-Spam Spam Keyword Checking Body Condition Stored XSS CVE-2026-23617 5.1 MediumFebruary 19, 2026
• gfi mailessentials, gfi software mailessentials ai +1 more GFI MailEssentials AI < 22.4 Anti-Spam Anti-Spoofing Description Stored XSS CVE-2026-23616 5.1 MediumFebruary 19, 2026
• gfi mailessentials, gfi software mailessentials ai +1 more GFI MailEssentials AI < 22.4 Anti-Spam Sender Policy Framework Email Exceptions Description Stored XSS CVE-2026-23615 5.1 MediumFebruary 19, 2026
• gfi mailessentials, gfi software mailessentials ai +1 more GFI MailEssentials AI < 22.4 Anti-Spam Sender Policy Framework IP Exceptions Description Stored XSS CVE-2026-23614 5.1 MediumFebruary 19, 2026
• gfi mailessentials, gfi software mailessentials ai +1 more GFI MailEssentials AI < 22.4 Anti-Spam URI DNS Blocklist Domain Stored XSS CVE-2026-23613 5.1 MediumFebruary 19, 2026
• gfi mailessentials, gfi software mailessentials ai +1 more GFI MailEssentials AI < 22.4 Anti-Spam IP DNS Blocklist Domain Stored XSS CVE-2026-23612 5.1 MediumFebruary 19, 2026
• gfi mailessentials, gfi software mailessentials ai +1 more GFI MailEssentials AI < 22.4 Anti-Spam IP Blocklist Description Stored XSS CVE-2026-23611 5.1 MediumFebruary 19, 2026
• gfi mailessentials, gfi software mailessentials ai +1 more GFI MailEssentials AI < 22.4 POP2Exchange POP3 Server Login Stored XSS CVE-2026-23610 5.1 MediumFebruary 19, 2026
• gfi mailessentials, gfi software mailessentials ai +1 more GFI MailEssentials AI < 22.4 General Settings Perimeter SMTP Servers Description Stored XSS CVE-2026-23609 5.1 MediumFebruary 19, 2026
• gfi mailessentials, gfi software mailessentials ai +1 more GFI MailEssentials AI < 22.4 Email Management Mail Monitoring Rule Stored XSS CVE-2026-23608 5.1 MediumFebruary 19, 2026
• gfi mailessentials, gfi software mailessentials ai +1 more GFI MailEssentials AI < 22.4 Anti-Spam Whitelist Description Stored XSS CVE-2026-23607 5.1 MediumFebruary 19, 2026
• gfi mailessentials, gfi software mailessentials ai +1 more GFI MailEssentials AI < 22.4 Advanced Content Filtering Rule Stored XSS CVE-2026-23606 5.1 MediumFebruary 19, 2026
• gfi mailessentials, gfi software mailessentials ai +1 more GFI MailEssentials AI < 22.4 Attachment Filtering Rule Stored XSS CVE-2026-23605 5.1 MediumFebruary 19, 2026
• gfi mailessentials, gfi software mailessentials ai +1 more GFI MailEssentials AI < 22.4 Keyword Filtering Rule Stored XSS CVE-2026-23604 5.1 MediumFebruary 19, 2026
• gfi kerio control GFI Kerio Control Unsigned System Image Upload Root Code Execution CVE-2025-34071 Public exploit 9.4 CriticalJuly 2, 2025
• gfi kerio control GFI Kerio Control GFIAgent Missing Authentication on Administrative Interfaces CVE-2025-34070 10.0 CriticalJuly 2, 2025
• gfi kerio control GFI Kerio Control GFIAgent Authentication Bypass via Proxy Forwarding CVE-2025-34069 Public exploit 9.5 CriticalJuly 2, 2025
• gfi archiver Hard-coded ArchiverSpaApi JWT Signing Key CVE-2025-35940 8.1 HighJune 10, 2025
• gfi mailessentials GFI MailEssentials < 21.8 MultiNode Insecure Deserialization CVE-2025-34491 8.8 HighApril 28, 2025
• gfi mailessentials GFI MailEssentials < 21.8 XXE Arbitrary File Read CVE-2025-34490 6.5 MediumApril 28, 2025
• gfi mailessentials GFI MailEssentials < 21.8 Local Privilege Escalation CVE-2025-34489 7.8 HighApril 28, 2025
• gfi kerioconnect, kerio connect +1 more GFI KerioConnect PDF File cross site scripting CVE-2025-2977 5.1 MediumMarch 31, 2025
• gfi kerioconnect, kerio connect +1 more GFI KerioConnect File Upload cross site scripting CVE-2025-2976 5.1 MediumMarch 31, 2025
• gfi kerioconnect, kerio connect +1 more GFI KerioConnect Signature EditHtmlSource cross site scripting CVE-2025-2975 5.1 MediumMarch 31, 2025
• gfi kerio control An issue was discovered in GFI Kerio Control 9.2.5 through 9.4.5. The dest GET parameter passed... CVE-2024-52875 EPSS 29.6% 8.8 HighJanuary 31, 2025
• gfi archiver GFI Archiver Store Service Deserialization of Untrusted Data Remote Code Execution Vulnerability CVE-2024-11949 8.8 HighDecember 11, 2024
• gfi archiver GFI Archiver Telerik Web UI Remote Code Execution Vulnerability CVE-2024-11948 9.8 CriticalDecember 11, 2024
• gfi archiver GFI Archiver Core Service Deserialization of Untrusted Data Remote Code Execution Vulnerability CVE-2024-11947 8.8 HighDecember 11, 2024
• gfi kerio connect An issue was discovered in GFI Kerio Connect 9.4.1 patch 1 (fixed in 10.0.0). There is a stack... CVE-2023-25267 8.8 HighMarch 15, 2023
• gfi archiver File upload vulnerability in GFI Mail Archiver versions up to and including 15.1 via insecure... CVE-2021-29281 9.8 CriticalJuly 7, 2022
• archiver project archiver Path Traversal in MHolt Archiver CVE-2019-10743 Public exploitFix available 5.5 MediumOctober 28, 2019
• gfi kerio control A DOM based XSS in GFI Kerio Control v9.3.0 allows embedding of malicious code and manipulating... CVE-2019-16414 6.1 MediumSeptember 30, 2019
• archiver project archiver Arbitrary File Write via Archive Extraction in mholt/archiver CVE-2018-1002207 Fix available 5.5 MediumJuly 25, 2018
• gfi kerio connect, kerio connect client +1 more Kerio Connect 8.0.0 through 9.2.2, and Kerio Connect Client desktop application for Windows and... CVE-2017-7440 6.5 MediumMay 2, 2017
• gfi backup 2009 Untrusted search path vulnerability in GFI Backup 3.1 Build 20100730 2009 Home Edition allows... CVE-2010-5254 6.9 MediumSeptember 7, 2012
• gfi vipre antivirus ** DISPUTED ** Race condition in VIPRE Antivirus Premium 4.0.3272 on Windows XP allows local... CVE-2010-5181 Disputed 6.2 MediumAugust 25, 2012
• gfi mailsecurity Buffer overflow in the HTTP management interface for GFI MailSecurity 8.1 allows remote attackers... CVE-2005-3182 7.5 HighOctober 20, 2005
• Show olderLoading…