Vendor
GFI
51 known vulnerabilities in products by GFI, 0 of them actively exploited (CISA KEV).
Key figures
51
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
7
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2024-52875 | GFI Kerio Control: HTTP Request/Response Splitting | 8.8 | |
| Critical | CVE-2021-29281 | GFI Archiver: security vulnerability | 9.8 | |
| High | CVE-2026-2036 | GFI Archiver MArc.Store Deserialization of Untrusted Data Remote Code Execution Vulnerability | 8.8 | |
| High | CVE-2026-2037 | GFI Archiver MArc.Core Deserialization of Untrusted Data Remote Code Execution Vulnerability | 8.8 | |
| Critical | CVE-2024-11948 | GFI Archiver Telerik Web UI Remote Code Execution Vulnerability | 9.8 | |
| Critical | CVE-2025-34071 | GFI Kerio Control Unsigned System Image Upload Root Code Execution | 9.8 | |
| Critical | CVE-2025-34070 | GFI Kerio Control GFIAgent Missing Authentication on Administrative Interfaces | 9.8 | |
| Critical | CVE-2025-34069 | GFI Kerio Control GFIAgent Authentication Bypass via Proxy Forwarding | 9.8 | |
| High | CVE-2025-34491 | GFI MailEssentials < 21.8 MultiNode Insecure Deserialization | 8.8 | |
| High | CVE-2023-25267 | GFI Kerio Connect: Stack-Based Buffer Overflow | 8.8 | |
| High | CVE-2024-11949 | GFI Archiver Store Service Deserialization of Untrusted Data Remote Code Execution Vulnerability | 8.8 | |
| High | CVE-2024-11947 | GFI Archiver Core Service Deserialization of Untrusted Data Remote Code Execution Vulnerability | 8.8 | |
| Medium | CVE-2019-16414 | GFI Kerio Control: Cross-Site Scripting (XSS) | 6.1 | |
| Critical | CVE-2026-2039 | GFI Archiver MArc.Store Missing Authorization Authentication Bypass Vulnerability | 7.3 | |
| Critical | CVE-2026-2038 | GFI Archiver MArc.Core Missing Authorization Authentication Bypass Vulnerability | 7.3 | |
| Not rated | CVE-2002-1121 | Trend Micro Interscan Viruswall: security vulnerability | — | |
| Not rated | CVE-2005-3182 | GFI Mailsecurity: Buffer Overflow | — | |
| Medium | CVE-2025-34490 | GFI MailEssentials < 21.8 XXE Arbitrary File Read | 6.5 | |
| Medium | CVE-2017-7440 | GFI Kerio Connect: Clickjacking | 6.5 | |
| High | CVE-2025-35940 | Hard-coded ArchiverSpaApi JWT Signing Key | 8.1 | |
| Not rated | CVE-2004-1312 | GFI MailEssentials: Denial of Service | — | |
| High | CVE-2025-34489 | GFI MailEssentials < 21.8 Local Privilege Escalation | 7.8 | |
| Medium | CVE-2026-23758 | GFI HelpDesk < 4.99.9 Stored XSS via editsubject Parameter | 5.4 | |
| Medium | CVE-2026-23621 | GFI Software MailEssentials AI: Observable Discrepancy | 4.3 | |
| Medium | CVE-2026-23757 | GFI HelpDesk < 4.99.10 Stored XSS via Reports Module | 5.4 |