CVEs we hold for Gfi

Records whose assigning authority named Gfi as the affected vendor. Newest identifiers first, capped at 200.

CVE-2026-74237GFI Exinda AI / ClearView < 7.6.5 Argument Injection via Tools Iperf ClientGFI ClearView

CVE-2026-74236GFI Exinda AI / ClearView < 7.6.5 Path Traversal via Diagnostic File Deletion HandlerGFI ClearView

CVE-2026-74235GFI Exinda AI / ClearView < 7.6.5 Path Traversal via Configuration Download HandlerGFI ClearView

CVE-2026-48539GFI Archiver < 15.13 Stored XSS via MailInsights.aspxGFI Archiver

CVE-2026-48538GFI Archiver < 15.13 Stored XSS via ImportSettingsWizard.ashxGFI Archiver

CVE-2026-48537GFI Archiver < 15.13 Stored XSS via FileArchiveAssistantWizard.aspxGFI Archiver

CVE-2026-48536GFI Archiver < 15.13 Stored XSS via GeneralSettingsWizard.aspxGFI Archiver

CVE-2026-48535GFI Archiver < 15.13 Stored XSS via CallHomeSettingsWizard.aspxGFI Archiver

CVE-2026-48534GFI Archiver < 15.13 Stored XSS via ImapServerWizard.aspxGFI Archiver

CVE-2026-48532GFI Archiver < 15.13 Stored XSS via FAARetentionPolicyWizard.aspxGFI Archiver

CVE-2026-48531GFI Archiver < 15.13 Stored XSS via RetentionPolicyWizard.aspxGFI Archiver

CVE-2026-48530GFI Archiver < 15.13 Stored XSS via CategorizationPolicyWizard.aspxGFI Archiver

CVE-2026-23758GFI HelpDesk < 4.99.9 Stored XSS via editsubject ParameterGFI Software HelpDesk

CVE-2026-23757GFI HelpDesk < 4.99.10 Stored XSS via Reports ModuleGFI Software HelpDesk

CVE-2026-23756GFI HelpDesk < 4.99.9 Stored XSS via Troubleshooter Step SubjectGFI Software HelpDesk

CVE-2026-23753GFI HelpDesk < 4.99.9 Stored XSS via charset ParameterGFI Software HelpDesk

CVE-2026-23752GFI HelpDesk < 4.99.9 Stored XSS via companyname ParameterGFI Software HelpDesk

CVE-2026-23621GFI MailEssentials AI < 22.4 ListServer.IsPathExist() Absolute Directory Traversal to File EnumerationGFI Software MailEssentials AI

CVE-2026-23620GFI MailEssentials AI < 22.4 ListServer.IsDBExist() Absolute Directory Traversal to File EnumerationGFI Software MailEssentials AI

CVE-2026-23619GFI MailEssentials AI < 22.4 General Settings Local Domains Domain Description Stored XSSGFI Software MailEssentials AI

CVE-2026-23618GFI MailEssentials AI < 22.4 Anti-Spam Spam Keyword Checking Subject Condition Stored XSSGFI Software MailEssentials AI

CVE-2026-23617GFI MailEssentials AI < 22.4 Anti-Spam Spam Keyword Checking Body Condition Stored XSSGFI Software MailEssentials AI

CVE-2026-23616GFI MailEssentials AI < 22.4 Anti-Spam Anti-Spoofing Description Stored XSSGFI Software MailEssentials AI

CVE-2026-23615GFI MailEssentials AI < 22.4 Anti-Spam Sender Policy Framework Email Exceptions Description Stored XSSGFI Software MailEssentials AI

CVE-2026-23614GFI MailEssentials AI < 22.4 Anti-Spam Sender Policy Framework IP Exceptions Description Stored XSSGFI Software MailEssentials AI

CVE-2026-23613GFI MailEssentials AI < 22.4 Anti-Spam URI DNS Blocklist Domain Stored XSSGFI Software MailEssentials AI

CVE-2026-23612GFI MailEssentials AI < 22.4 Anti-Spam IP DNS Blocklist Domain Stored XSSGFI Software MailEssentials AI

CVE-2026-23611GFI MailEssentials AI < 22.4 Anti-Spam IP Blocklist Description Stored XSSGFI Software MailEssentials AI

CVE-2026-23610GFI MailEssentials AI < 22.4 POP2Exchange POP3 Server Login Stored XSSGFI Software MailEssentials AI

CVE-2026-23609GFI MailEssentials AI < 22.4 General Settings Perimeter SMTP Servers Description Stored XSSGFI Software MailEssentials AI

CVE-2026-23608GFI MailEssentials AI < 22.4 Email Management Mail Monitoring Rule Stored XSSGFI Software MailEssentials AI

CVE-2026-23607GFI MailEssentials AI < 22.4 Anti-Spam Whitelist Description Stored XSSGFI Software MailEssentials AI

CVE-2026-23606GFI MailEssentials AI < 22.4 Advanced Content Filtering Rule Stored XSSGFI Software MailEssentials AI

CVE-2026-23605GFI MailEssentials AI < 22.4 Attachment Filtering Rule Stored XSSGFI Software MailEssentials AI

CVE-2026-23604GFI MailEssentials AI < 22.4 Keyword Filtering Rule Stored XSSGFI Software MailEssentials AI

CVE-2026-2039GFI Archiver MArc.Store Missing Authorization Authentication Bypass VulnerabilityGFI Archiver

CVE-2026-2038GFI Archiver MArc.Core Missing Authorization Authentication Bypass VulnerabilityGFI Archiver

CVE-2026-2037GFI Archiver MArc.Core Deserialization of Untrusted Data Remote Code Execution VulnerabilityGFI Archiver

CVE-2026-2036GFI Archiver MArc.Store Deserialization of Untrusted Data Remote Code Execution VulnerabilityGFI Archiver

CVE-2025-35940Hard-coded ArchiverSpaApi JWT Signing KeyGFI Archiver

CVE-2025-34491GFI MailEssentials < 21.8 MultiNode Insecure DeserializationGFI MailEssentials

CVE-2025-34490GFI MailEssentials < 21.8 XXE Arbitrary File ReadGFI MailEssentials

CVE-2025-34489GFI MailEssentials < 21.8 Local Privilege EscalationGFI MailEssentials

CVE-2025-34071GFI Kerio Control Unsigned System Image Upload Root Code ExecutionGFI Software Kerio Control

CVE-2025-34070GFI Kerio Control GFIAgent Missing Authentication on Administrative InterfacesGFI Software Kerio Control

CVE-2025-34069GFI Kerio Control GFIAgent Authentication Bypass via Proxy ForwardingGFI Software Kerio Control

CVE-2025-2977GFI KerioConnect PDF File cross site scriptingGFI KerioConnect

CVE-2025-2976GFI KerioConnect File Upload cross site scriptingGFI KerioConnect

CVE-2025-2975GFI KerioConnect Signature EditHtmlSource cross site scriptingGFI KerioConnect

CVE-2024-52875no title heldGFI Kerio Control

CVE-2024-11949GFI Archiver Store Service Deserialization of Untrusted Data Remote Code Execution VulnerabilityGFI Archiver

CVE-2024-11948GFI Archiver Telerik Web UI Remote Code Execution VulnerabilityGFI Archiver

CVE-2024-11947GFI Archiver Core Service Deserialization of Untrusted Data Remote Code Execution VulnerabilityGFI Archiver

53 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.

Everything on this page is free. Public data. Withholding it protects nothing.