GFI vulnerabilities

CVEs per yearBy the year they were published

1. 20243
2. 20258
3. 20264

Newest CVEs

• CVE-2026-2039

  GFI Archiver MArc.Store Missing Authorization Authentication Bypass Vulnerability

  GFI · Archiver

  High7.3
• CVE-2026-2036

  GFI Archiver MArc.Store Deserialization of Untrusted Data Remote Code Execution Vulnerability

  GFI · Archiver

  High8.8
• CVE-2026-2038

  GFI Archiver MArc.Core Missing Authorization Authentication Bypass Vulnerability

  GFI · Archiver

  High7.3
• CVE-2026-2037

  GFI Archiver MArc.Core Deserialization of Untrusted Data Remote Code Execution Vulnerability

  GFI · Archiver

  High8.8
• CVE-2025-35940

  Hard-coded ArchiverSpaApi JWT Signing Key

  GFI · Archiver

  High8.1
• CVE-2025-34491

  GFI MailEssentials < 21.8 MultiNode Insecure Deserialization

  GFI · MailEssentials

  High8.8
• CVE-2025-34490

  GFI MailEssentials < 21.8 XXE Arbitrary File Read

  GFI · MailEssentials

  Medium6.5
• CVE-2025-34489

  GFI MailEssentials < 21.8 Local Privilege Escalation

  GFI · MailEssentials

  High7.8
• CVE-2025-2977

  GFI KerioConnect PDF File cross site scripting

  GFI · KerioConnect

  Medium5.1
• CVE-2025-2976

  GFI KerioConnect File Upload cross site scripting

  GFI · KerioConnect

  Medium5.1