# cve.now: GFI Software

The newest entries naming GFI Software as an affected vendor (up to 200), of 39 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-112333](https://cve.now/CVE-2026-112333.md): GFI Archiver \< 15.14 Stored XSS via MailInsights.aspx (CVSS 5.1)
- [CVE-2026-74237](https://cve.now/CVE-2026-74237.md): GFI Exinda AI / ClearView \< 7.6.5 Argument Injection via Tools Iperf Client (CVSS 7.1)
- [CVE-2026-74236](https://cve.now/CVE-2026-74236.md): GFI Exinda AI / ClearView \< 7.6.5 Path Traversal via Diagnostic File Deletion Handler (CVSS 7.0)
- [CVE-2026-74235](https://cve.now/CVE-2026-74235.md): GFI Exinda AI / ClearView \< 7.6.5 Path Traversal via Configuration Download Handler (CVSS 6.9)
- [CVE-2026-48539](https://cve.now/CVE-2026-48539.md): GFI Archiver \< 15.14 Stored XSS via MailInsights.aspx (CVSS 5.1)
- [CVE-2026-48538](https://cve.now/CVE-2026-48538.md): GFI Archiver \< 15.13 Stored XSS via ImportSettingsWizard.ashx (CVSS 5.1)
- [CVE-2026-48537](https://cve.now/CVE-2026-48537.md): GFI Archiver \< 15.13 Stored XSS via FileArchiveAssistantWizard.aspx (CVSS 5.1)
- [CVE-2026-48536](https://cve.now/CVE-2026-48536.md): GFI Archiver \< 15.13 Stored XSS via GeneralSettingsWizard.aspx (CVSS 5.1)
- [CVE-2026-48535](https://cve.now/CVE-2026-48535.md): GFI Archiver \< 15.13 Stored XSS via CallHomeSettingsWizard.aspx (CVSS 5.1)
- [CVE-2026-48534](https://cve.now/CVE-2026-48534.md): GFI Archiver \< 15.13 Stored XSS via ImapServerWizard.aspx (CVSS 5.1)
- [CVE-2026-48532](https://cve.now/CVE-2026-48532.md): GFI Archiver \< 15.13 Stored XSS via FAARetentionPolicyWizard.aspx (CVSS 5.1)
- [CVE-2026-48531](https://cve.now/CVE-2026-48531.md): GFI Archiver \< 15.13 Stored XSS via RetentionPolicyWizard.aspx (CVSS 5.1)
- [CVE-2026-48530](https://cve.now/CVE-2026-48530.md): GFI Archiver \< 15.14 Stored XSS via CategorizationPolicyWizard.aspx (CVSS 5.1)
- [CVE-2026-23753](https://cve.now/CVE-2026-23753.md): GFI HelpDesk \< 4.99.9 Stored XSS via charset Parameter (CVSS 4.8)
- [CVE-2026-23752](https://cve.now/CVE-2026-23752.md): GFI HelpDesk \< 4.99.9 Stored XSS via companyname Parameter (CVSS 4.8)
- [CVE-2026-23756](https://cve.now/CVE-2026-23756.md): GFI HelpDesk \< 4.99.9 Stored XSS via Troubleshooter Step Subject (CVSS 5.1)
- [CVE-2026-23758](https://cve.now/CVE-2026-23758.md): GFI HelpDesk \< 4.99.9 Stored XSS via editsubject Parameter (CVSS 5.1)
- [CVE-2026-23757](https://cve.now/CVE-2026-23757.md): GFI HelpDesk \< 4.99.10 Stored XSS via Reports Module (CVSS 5.1)
- [CVE-2026-23621](https://cve.now/CVE-2026-23621.md): GFI MailEssentials AI \< 22.4 ListServer.IsPathExist() Absolute Directory Traversal to File Enumeration (CVSS 5.3)
- [CVE-2026-23620](https://cve.now/CVE-2026-23620.md): GFI MailEssentials AI \< 22.4 ListServer.IsDBExist() Absolute Directory Traversal to File Enumeration (CVSS 5.3)
- [CVE-2026-23619](https://cve.now/CVE-2026-23619.md): GFI MailEssentials AI \< 22.4 General Settings Local Domains Domain Description Stored XSS (CVSS 5.1)
- [CVE-2026-23618](https://cve.now/CVE-2026-23618.md): GFI MailEssentials AI \< 22.4 Anti-Spam Spam Keyword Checking Subject Condition Stored XSS (CVSS 5.1)
- [CVE-2026-23617](https://cve.now/CVE-2026-23617.md): GFI MailEssentials AI \< 22.4 Anti-Spam Spam Keyword Checking Body Condition Stored XSS (CVSS 5.1)
- [CVE-2026-23616](https://cve.now/CVE-2026-23616.md): GFI MailEssentials AI \< 22.4 Anti-Spam Anti-Spoofing Description Stored XSS (CVSS 5.1)
- [CVE-2026-23615](https://cve.now/CVE-2026-23615.md): GFI MailEssentials AI \< 22.4 Anti-Spam Sender Policy Framework Email Exceptions Description Stored XSS (CVSS 5.1)
- [CVE-2026-23614](https://cve.now/CVE-2026-23614.md): GFI MailEssentials AI \< 22.4 Anti-Spam Sender Policy Framework IP Exceptions Description Stored XSS (CVSS 5.1)
- [CVE-2026-23613](https://cve.now/CVE-2026-23613.md): GFI MailEssentials AI \< 22.4 Anti-Spam URI DNS Blocklist Domain Stored XSS (CVSS 5.1)
- [CVE-2026-23612](https://cve.now/CVE-2026-23612.md): GFI MailEssentials AI \< 22.4 Anti-Spam IP DNS Blocklist Domain Stored XSS (CVSS 5.1)
- [CVE-2026-23611](https://cve.now/CVE-2026-23611.md): GFI MailEssentials AI \< 22.4 Anti-Spam IP Blocklist Description Stored XSS (CVSS 5.1)
- [CVE-2026-23610](https://cve.now/CVE-2026-23610.md): GFI MailEssentials AI \< 22.4 POP2Exchange POP3 Server Login Stored XSS (CVSS 5.1)
- [CVE-2026-23609](https://cve.now/CVE-2026-23609.md): GFI MailEssentials AI \< 22.4 General Settings Perimeter SMTP Servers Description Stored XSS (CVSS 5.1)
- [CVE-2026-23608](https://cve.now/CVE-2026-23608.md): GFI MailEssentials AI \< 22.4 Email Management Mail Monitoring Rule Stored XSS (CVSS 5.1)
- [CVE-2026-23607](https://cve.now/CVE-2026-23607.md): GFI MailEssentials AI \< 22.4 Anti-Spam Whitelist Description Stored XSS (CVSS 5.1)
- [CVE-2026-23606](https://cve.now/CVE-2026-23606.md): GFI MailEssentials AI \< 22.4 Advanced Content Filtering Rule Stored XSS (CVSS 5.1)
- [CVE-2026-23605](https://cve.now/CVE-2026-23605.md): GFI MailEssentials AI \< 22.4 Attachment Filtering Rule Stored XSS (CVSS 5.1)
- [CVE-2026-23604](https://cve.now/CVE-2026-23604.md): GFI MailEssentials AI \< 22.4 Keyword Filtering Rule Stored XSS (CVSS 5.1)
- [CVE-2025-34071](https://cve.now/CVE-2025-34071.md): GFI Kerio Control Unsigned System Image Upload Root Code Execution (CVSS 9.4)
- [CVE-2025-34070](https://cve.now/CVE-2025-34070.md): GFI Kerio Control GFIAgent Missing Authentication on Administrative Interfaces (CVSS 10.0)
- [CVE-2025-34069](https://cve.now/CVE-2025-34069.md): GFI Kerio Control GFIAgent Authentication Bypass via Proxy Forwarding (CVSS 9.5)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/gfi-software
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.