Skip to content
OpenAdvisories

Vendor

GFI Software

39 known vulnerabilities.

Products

MailEssentials AI 18 GFI Archiver 10 HelpDesk 5 Kerio Control 3 GFI Exinda AI 3 GFI ClearView 3
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.4
    CVE-2025-34071 Public exploit

    GFI Kerio Control Unsigned System Image Upload Root Code Execution

    A remote code execution vulnerability in GFI Kerio Control 9.4.5 allows attackers with administrative access to upload and execute arbitrary code through the firmware upgrade feature. The system upgrade mechanism accepts unsigned .img files, which can be modi…

    GFI Software Kerio Control
  • Critical 9.5
    CVE-2025-34069 Public exploit

    GFI Kerio Control GFIAgent Authentication Bypass via Proxy Forwarding

    An authentication bypass vulnerability exists in GFI Kerio Control 9.4.5 due to insecure default proxy configuration and weak access control in the GFIAgent service. The non-transparent proxy on TCP port 3128 can be used to forward unauthenticated requests to…

    GFI Software Kerio Control