GFI Software

Products

ProductCVEsExploitedLatest
MailEssentials AI18–Feb 19, 2026
GFI Archiver10–Oct 23, 2026
HelpDesk5–Apr 20, 2026
GFI ClearView3–Sep 4, 2026
GFI Exinda AI3–Sep 4, 2026
Kerio Control3–Jul 2, 2025

Exploited and recent CVEs

  • CVE-2026-112333 Medium 5.4 GFI Archiver < 15.14 Stored XSS via MailInsights.aspx 0.1%
  • CVE-2026-74237 Medium 6.5 GFI Exinda AI / ClearView < 7.6.5 Argument Injection via Tools Iperf Client 0.4%
  • CVE-2026-74237 Medium 6.5 GFI Exinda AI / ClearView < 7.6.5 Argument Injection via Tools Iperf Client 0.4%
  • CVE-2026-74236 Medium 6.5 GFI Exinda AI / ClearView < 7.6.5 Path Traversal via Diagnostic File Deletion Handler 0.9%
  • CVE-2026-74236 Medium 6.5 GFI Exinda AI / ClearView < 7.6.5 Path Traversal via Diagnostic File Deletion Handler 0.9%
  • CVE-2026-74235 Medium 4.9 GFI Exinda AI / ClearView < 7.6.5 Path Traversal via Configuration Download Handler 0.8%
  • CVE-2026-74235 Medium 4.9 GFI Exinda AI / ClearView < 7.6.5 Path Traversal via Configuration Download Handler 0.8%
  • CVE-2026-48539 Medium 5.4 GFI Archiver < 15.14 Stored XSS via MailInsights.aspx 0.2%
  • CVE-2026-48538 Medium 5.4 GFI Archiver < 15.13 Stored XSS via ImportSettingsWizard.ashx 0.2%
  • CVE-2026-48537 Medium 5.4 GFI Archiver < 15.13 Stored XSS via FileArchiveAssistantWizard.aspx 0.2%
  • CVE-2026-48536 Medium 5.4 GFI Archiver < 15.13 Stored XSS via GeneralSettingsWizard.aspx 0.2%
  • CVE-2026-48535 Medium 5.4 GFI Archiver < 15.13 Stored XSS via CallHomeSettingsWizard.aspx 0.2%
  • CVE-2026-48534 Medium 5.4 GFI Archiver < 15.13 Stored XSS via ImapServerWizard.aspx 0.2%
  • CVE-2026-48532 Medium 5.4 GFI Archiver < 15.13 Stored XSS via FAARetentionPolicyWizard.aspx 0.2%
  • CVE-2026-48531 Medium 5.4 GFI Archiver < 15.13 Stored XSS via RetentionPolicyWizard.aspx 0.2%
  • CVE-2026-48530 Medium 5.4 GFI Archiver < 15.14 Stored XSS via CategorizationPolicyWizard.aspx 0.2%
  • CVE-2026-23753 Medium 4.8 GFI HelpDesk < 4.99.9 Stored XSS via charset Parameter 0.2%
  • CVE-2026-23752 Medium 4.8 GFI HelpDesk < 4.99.9 Stored XSS via companyname Parameter 0.2%
  • CVE-2026-23756 Medium 5.4 GFI HelpDesk < 4.99.9 Stored XSS via Troubleshooter Step Subject 0.1%
  • CVE-2026-23758 Medium 5.1 GFI HelpDesk < 4.99.9 Stored XSS via editsubject Parameter 0.2%
  • CVE-2026-23757 Medium 5.4 GFI HelpDesk < 4.99.10 Stored XSS via Reports Module 0.1%
  • CVE-2026-23621 Medium 4.3 GFI MailEssentials AI < 22.4 ListServer.IsPathExist() Absolute Directory Traversal to File Enumeration 0.3%
  • CVE-2026-23620 Medium 4.3 GFI MailEssentials AI < 22.4 ListServer.IsDBExist() Absolute Directory Traversal to File Enumeration 0.2%
  • CVE-2026-23619 Medium 5.4 GFI MailEssentials AI < 22.4 General Settings Local Domains Domain Description Stored XSS 0.2%
  • CVE-2026-23618 Medium 5.4 GFI MailEssentials AI < 22.4 Anti-Spam Spam Keyword Checking Subject Condition Stored XSS 0.2%
  • CVE-2026-23617 Medium 5.4 GFI MailEssentials AI < 22.4 Anti-Spam Spam Keyword Checking Body Condition Stored XSS 0.2%
  • CVE-2026-23616 Medium 5.4 GFI MailEssentials AI < 22.4 Anti-Spam Anti-Spoofing Description Stored XSS 0.2%
  • CVE-2026-23615 Medium 5.4 GFI MailEssentials AI < 22.4 Anti-Spam Sender Policy Framework Email Exceptions Description Stored XSS 0.2%
  • CVE-2026-23614 Medium 5.4 GFI MailEssentials AI < 22.4 Anti-Spam Sender Policy Framework IP Exceptions Description Stored XSS 0.2%
  • CVE-2026-23613 Medium 5.4 GFI MailEssentials AI < 22.4 Anti-Spam URI DNS Blocklist Domain Stored XSS 0.2%