AR
Product
Archiver
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 5Medium 0Low 0
Watch
Add Archiver to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-2039 | 9.8 | Feb 20 | GFI Archiver MArc.Store Missing Authorization Authentication Bypass Vulnerability Affected: 15.10 |
| CVE-2026-2038 | 9.8 | Feb 20 | GFI Archiver MArc.Core Missing Authorization Authentication Bypass Vulnerability Affected: 15.10 |
| CVE-2024-11948 | 9.8 | Dec 12 | GFI Archiver Telerik Web UI Remote Code Execution Vulnerability Affected: before 15.7 |
| CVE-2021-29281 | 9.8 | Jul 7 | File upload vulnerability in GFI Mail Archiver versions up to and including 15.1 via insecure implementation of Telerik Web UI plugin which is affected by CVE-2014-2217, and… Affected: before 15.2 |
| CVE-2026-2036 | 8.8 | Feb 20 | GFI Archiver MArc.Store Deserialization of Untrusted Data Remote Code Execution Vulnerability Affected: 15.10 |
| CVE-2026-2037 | 8.8 | Feb 20 | GFI Archiver MArc.Core Deserialization of Untrusted Data Remote Code Execution Vulnerability Affected: 15.10 |
| CVE-2024-11949 | 8.8 | Dec 12 | GFI Archiver Store Service Deserialization of Untrusted Data Remote Code Execution Vulnerability Affected: before 15.7 |
| CVE-2024-11947 | 8.8 | Dec 12 | GFI Archiver Core Service Deserialization of Untrusted Data Remote Code Execution Vulnerability Affected: before 15.7 |
| CVE-2025-35940 | 8.1 | Jun 10 | Hard-coded ArchiverSpaApi JWT Signing Key Affected: 15.7 through 15.8 |
Showing 9
