Vendor

    Gfi Software

    39 known vulnerabilities in products by Gfi Software, 0 of them actively exploited (CISA KEV).

    Key figures

    39

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    3

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Gfi Software
    HighCVE-2026-74236

    GFI Exinda AI / ClearView < 7.6.5 Path Traversal via Diagnostic File Deletion Handler

    		6.5
    MediumCVE-2026-74235

    GFI Exinda AI / ClearView < 7.6.5 Path Traversal via Configuration Download Handler

    		4.9
    CriticalCVE-2025-34071

    GFI Kerio Control Unsigned System Image Upload Root Code Execution

    also in 1 other product

    		9.8
    CriticalCVE-2025-34070

    GFI Kerio Control GFIAgent Missing Authentication on Administrative Interfaces

    also in 1 other product

    		9.8
    CriticalCVE-2025-34069

    GFI Kerio Control GFIAgent Authentication Bypass via Proxy Forwarding

    also in 1 other product

    		9.8
    HighCVE-2026-74237

    GFI Exinda AI / ClearView < 7.6.5 Argument Injection via Tools Iperf Client

    		6.5
    MediumCVE-2026-112333

    GFI Archiver < 15.14 Stored XSS via MailInsights.aspx

    		5.4
    MediumCVE-2026-48538

    GFI Archiver < 15.13 Stored XSS via ImportSettingsWizard.ashx

    		5.4
    MediumCVE-2026-48535

    GFI Archiver < 15.13 Stored XSS via CallHomeSettingsWizard.aspx

    		5.4
    MediumCVE-2026-48534

    GFI Archiver < 15.13 Stored XSS via ImapServerWizard.aspx

    		5.4
    MediumCVE-2026-48537

    GFI Archiver < 15.13 Stored XSS via FileArchiveAssistantWizard.aspx

    		5.4
    MediumCVE-2026-48536

    GFI Archiver < 15.13 Stored XSS via GeneralSettingsWizard.aspx

    		5.4
    MediumCVE-2026-48532

    GFI Archiver < 15.13 Stored XSS via FAARetentionPolicyWizard.aspx

    		5.4
    MediumCVE-2026-48531

    GFI Archiver < 15.13 Stored XSS via RetentionPolicyWizard.aspx

    		5.4
    MediumCVE-2026-48539

    GFI Archiver < 15.14 Stored XSS via MailInsights.aspx

    		5.4
    MediumCVE-2026-48530

    GFI Archiver < 15.14 Stored XSS via CategorizationPolicyWizard.aspx

    		5.4
    MediumCVE-2026-23758

    GFI HelpDesk < 4.99.9 Stored XSS via editsubject Parameter

    also in 1 other product

    		5.4
    MediumCVE-2026-23621

    GFI Software MailEssentials AI: Observable Discrepancy

    also in 1 other product

    		4.3
    MediumCVE-2026-23756

    GFI HelpDesk < 4.99.9 Stored XSS via Troubleshooter Step Subject

    also in 1 other product

    		5.4
    MediumCVE-2026-23757

    GFI HelpDesk < 4.99.10 Stored XSS via Reports Module

    also in 1 other product

    		5.4
    MediumCVE-2026-23614

    GFI MailEssentials AI < 22.4 Anti-Spam Sender Policy Framework IP Exceptions Description Stored XSS

    also in 1 other product

    		5.4
    MediumCVE-2026-23612

    GFI MailEssentials AI < 22.4 Anti-Spam IP DNS Blocklist Domain Stored XSS

    also in 1 other product

    		5.4
    MediumCVE-2026-23610

    GFI MailEssentials AI < 22.4 POP2Exchange POP3 Server Login Stored XSS

    also in 1 other product

    		5.4
    MediumCVE-2026-23605

    GFI MailEssentials AI < 22.4 Attachment Filtering Rule Stored XSS

    also in 1 other product

    		5.4
    MediumCVE-2026-23619

    GFI MailEssentials AI < 22.4 General Settings Local Domains Domain Description Stored XSS

    also in 1 other product

    		5.4

    All vulnerabilities in search

    Products

    Products by Gfi Software
    Mailessentials AI180
    Gfi Archiver100
    Helpdesk50
    Gfi Clearview30
    Gfi Exinda AI30
    Kerio Control30