Skip to content
OpenAdvisories

Vendor

GFI USA

3 known vulnerabilities.

Products

GFI KerioConnect 3
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.1
    CVE-2026-112356

    GFI KerioConnect < 10.0.9p2 XSS via Link Auto-Formatter

    GFI KerioConnect (Kerio Connect) before 10.0.9 Patch 2 contains a cross-site scripting vulnerability in the Webmail component that allows a remote attacker to spoof link targets or inject HTML into a message as rendered in a victim's authenticated Webmail ses…

    GFI USA GFI KerioConnect