Skip to content
OpenAdvisories

Vendor

GFI Software

54 known vulnerabilities.

Products

MailEssentials AI 18 GFI Archiver 10 Archiver 8 HelpDesk 5 Kerio Control 4 GFI Exinda AI 3 GFI ClearView 3 MailEssentials 3 KerioConnect 3
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 9.4
    CVE-2025-34071 Public exploit

    GFI Kerio Control Unsigned System Image Upload Root Code Execution

    A remote code execution vulnerability in GFI Kerio Control 9.4.5 allows attackers with administrative access to upload and execute arbitrary code through the firmware upgrade feature. The system upgrade mechanism accepts unsigned .img files, which can be modi…

    GFI Software Kerio Control
  • Critical 10.0
    CVE-2025-34070

    GFI Kerio Control GFIAgent Missing Authentication on Administrative Interfaces

    A missing authentication vulnerability in the GFIAgent component of GFI Kerio Control 9.4.5 allows unauthenticated remote attackers to perform privileged operations. The GFIAgent service, responsible for integration with GFI AppManager, exposes HTTP services …

    GFI Software Kerio Control
  • Critical 9.5
    CVE-2025-34069 Public exploit

    GFI Kerio Control GFIAgent Authentication Bypass via Proxy Forwarding

    An authentication bypass vulnerability exists in GFI Kerio Control 9.4.5 due to insecure default proxy configuration and weak access control in the GFIAgent service. The non-transparent proxy on TCP port 3128 can be used to forward unauthenticated requests to…

    GFI Software Kerio Control
  • Critical 9.8
    CVE-2024-11948

    GFI Archiver Telerik Web UI Remote Code Execution Vulnerability

    GFI Archiver Telerik Web UI Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GFI Archiver. Authentication is not required to exploit this vulnerability. The specific flaw ex…

    GFI Software Archiver