GFI Software

Records64All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical8CVSS 9.0–10.0

CVSS high14CVSS 7.0–8.9

Exploited now

GFI Software records in CISA KEV

No GFI Software vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Mailessentials 22 records HIGH Archiver 8 records MEDIUM Helpdesk 5 records LOW Kerio Connect 5 records HIGH Kerio Control 5 records HIGH Mailsecurity 3 records MEDIUM Gfi Backup 2009 1 record LOW Kerio Connect Client 1 record LOW

Records

8 records in Archiver · all components

TI-2024-11085 CVE-2024-11948 · GHSA-mr3h-f548-mcv9

GFI Archiver Telerik Web UI Remote Code Execution Vulnerability

MEDIUM 52

GFI Archiver Telerik Web UI Remote Code Execution Vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01435 Published 2024-12-11 No fix listed CWE-1395

TI-2026-01696 CVE-2026-2039 · GHSA-q8fp-vccx-9w2h

Missing authorization in GFI Software Archiver

MEDIUM 49

GFI Archiver MArc.Store Missing Authorization Authentication Bypass Vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00743 Published 2026-02-20 No fix listed CWE-862

TI-2026-01695 CVE-2026-2038 · GHSA-rc45-jprg-5pmq

Missing authorization in GFI Software Archiver

MEDIUM 49

GFI Archiver MArc.Core Missing Authorization Authentication Bypass Vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00717 Published 2026-02-20 No fix listed CWE-862

TI-2021-10082 CVE-2021-29281 · GHSA-gxxx-8rjm-vqf3

File upload vulnerability in GFI Mail Archiver versions up to and including 15.1 via…

MEDIUM 47

File upload vulnerability in GFI Mail Archiver versions up to and including 15.1 via insecure implementation of Telerik Web UI plugin which is affected by CVE-2014-2217, and CVE-2017-11317.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02566 Published 2022-07-07 No fix listed CWE-434

TI-2026-01694 CVE-2026-2037 · GHSA-7h2v-5mq4-f627

Deserialization of untrusted data in GFI Software Archiver

MEDIUM 43

GFI Archiver MArc.Core Deserialization of Untrusted Data Remote Code Execution Vulnerability.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01369 Published 2026-02-20 No fix listed CWE-502

TI-2026-01693 CVE-2026-2036 · GHSA-8r4q-6953-w8gp

Deserialization of untrusted data in GFI Software Archiver

MEDIUM 43

GFI Archiver MArc.Store Deserialization of Untrusted Data Remote Code Execution Vulnerability.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01369 Published 2026-02-20 No fix listed CWE-502

TI-2024-11086 CVE-2024-11949 · GHSA-p2gm-hcx7-mr3w

Deserialization of untrusted data in GFI Software Archiver

MEDIUM 41

GFI Archiver Store Service Deserialization of Untrusted Data Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00793 Published 2024-12-11 No fix listed CWE-502

TI-2024-11084 CVE-2024-11947 · GHSA-f7g9-gqxr-pmv7

Deserialization of untrusted data in GFI Software Archiver

MEDIUM 41

GFI Archiver Core Service Deserialization of Untrusted Data Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00793 Published 2024-12-11 No fix listed CWE-502

Open these records in search →

Critical	8
High	14
Medium	42
Low	0
No CVSS	0