Skip to content
OpenAdvisories

Vendor

GFI USA

3 known vulnerabilities.

Products

GFI KerioConnect 3
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.8
    CVE-2026-112357

    GFI KerioConnect KOFF < 10.0.9p2 Privilege Escalation

    GFI KerioConnect (Kerio Connect) Outlook Connector (Offline Edition), 'KOFF', before 10.0.9 Patch 2 contains a local privilege escalation vulnerability caused by weak installer permissions that leave the product directory writable by the built-in Users group.…

    GFI USA GFI KerioConnect
  • High 8.2
    CVE-2026-112353

    GFI KerioConnect < 10.0.8p2 Stored XSS via SVG Attachment

    GFI KerioConnect (Kerio Connect) before 10.0.8 Patch 2 contains a stored cross-site scripting vulnerability in the Webmail component that allows a remote attacker to run JavaScript in a victim's authenticated Webmail session by uploading a crafted SVG email a…

    GFI USA GFI KerioConnect